US12572503B2

US12572503B2 - Application level to share level replication policy transition for file server disaster recovery systems

Info

Publication number: US12572503B2
Application number: US18/178,400
Authority: US
Inventors: Eric Wang; Kalpesh Ashok Bafna
Original assignee: Nutanix Inc
Current assignee: Nutanix Inc
Priority date: 2022-08-26
Filing date: 2023-03-03
Publication date: 2026-03-10
Also published as: US20240070032A1

Abstract

Examples of systems described herein may allow users to change from an application level disaster recovery system (e.g., an application level replication policy) to a share level disaster recovery system (e.g., a share level replication policy). The change may be made such that a base snapshot need not again be taken when beginning operation under the share level replication policy—rather, the base snapshot previously taken during application level replication may be used in some examples. That base snapshot may be leveraged, an initial set of common share snapshots established, and protection maintained going forward on a share level basis.

Description

CROSS-REFERENCE TO RELATED APPLICATION(S)

This application claims the benefit under 35 U.S.C. § 119(e) of the earlier filing date of U.S. Provisional Application No. 63/401,440 filed Aug. 26, 2022, which is incorporated herein by reference, in its entirety, for any purpose.

BACKGROUND

Disaster recovery for distributed file servers often includes obtaining snapshots of a distributed file server. When a disaster occurs, failover (e.g., to a backup site) may take hours or longer to configure the file server at the backup site from the snapshots.

SUMMARY

Examples described herein include software. Examples include at least one non-transitory computer readable medium encoded with executable instructions which, when executed, cause a system to perform operations. In some examples, the operations include, in accordance with an application level replication policy, replicate a snapshot of a file server to a disaster recovery location. In some examples, the snapshot includes at least one snapshot of a share of a file system provided by the file server.

In some examples, operations include update a recovery policy at the file server for subsequent replication on a share level.

In some examples, updating the recovery policy comprises receiving an indication of a replication policy specific to the share.

In some examples, updating the recovery policy comprises receiving an indication of a first replication policy for the share and a second replication policy for another share of the file system. The second replication policy may be different than the first replication policy.

In some examples, the file server comprises a plurality of virtualized computing instances, each of the plurality of virtualized computing instances configured to present a namespace of storage items of the file system.

In some examples, the file server comprises a plurality of host machines, each host machine configured to host at least one of a plurality of virtualized computing instances.

In some examples, the snapshot of the file server includes snapshots of the plurality of virtualized computing instances.

In some examples, at least one of the plurality of virtualized computing instances is configured to manage access requests for a storage item of the file system.

In some examples, the storage item is stored in a storage pool, the storage pool including local storage devices of at least one of the plurality of host machines.

Examples described herein include methods. An example method includes hosting a file server having a protection domain including a plurality of virtualized computing instances and files of a file system hosted by the file server. The example method may also include requesting a change from the protection domain to a data protection policy specific to a share of the file system. The example method may also include replicating a snapshot of the share in accordance with the data protection policy.

In some examples, a method may further include generating a snapshot of the file server. The method may further include generating a secondary file server based on the snapshot of the file server.

In some examples, replicating the snapshot of the share comprises replicating the snapshot of the share to the secondary file server.

In some examples, the secondary file server is a passive read-only secondary file server.

In some examples, the file server includes a plurality of host machines, and each of the host machines is configured to host at least one of the plurality of virtualized computing instances.

In some examples, the file server includes a storage pool, and the storage pool includes a local storage device of at least one of the host machines.

In some examples, the plurality of virtualized computing instances are configured to manage access requests for a storage item of the file system.

In some examples, the protection domain comprises an application level protection domain.

In some examples, the data protection policy comprises a share level data protection policy.

Examples described herein include systems. An example system may include a primary file server. The primary file server may include a virtualized computing instance configured to form a cluster with other virtualized computing instances, the virtualized computing instance configured to present a namespace of storage items. The example system may include a storage pool, the storage pool accessible to the virtualized computing instance and configured to store the namespace of storage items, wherein the virtualized computing instance is configured to manage access requests for a particular storage item in the namespace of storage items. The example system may include a secondary file server, the secondary file server replicated from a snapshot of the primary file server in accordance with a file server level protection domain. The example system may include a user interface to the primary file server, the user interface configured to provide a request to change from the file server level protection domain to a share level data protection policy.

In some examples, the secondary file server comprises a passive read-only secondary file server.

In some examples, the primary file server comprises a plurality of host machines, and each of the plurality of host machines is configured to host at least one of the virtualized computing instances.

In some examples, the storage pool includes at least one local storage device of the plurality of host machines.

In some examples, the primary file server is configured to replicate a snapshot of a share of a file system hosted by the primary file server after receipt of the request to change from the file server level protection domain to the share level data protection policy.

In some examples, the share level data protection policy includes a first data protection policy for a first share of a file system hosted by the primary file server and a second data protection policy for a second share of the file system hosted by the primary file server. The first data protection policy and the second data protection policy may be different.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a schematic illustration of a clustered virtualization environment 700 implementing a virtualized file server in accordance with examples described herein.

FIG. 2 is a schematic illustration of a clustered virtualization environment 800 arranged in accordance with examples described herein.

FIG. 3 illustrates an example hierarchical structure of a VFS instance in a cluster according to particular embodiments.

FIG. 4 illustrates two example host machines, each providing file storage services for portions of two VFS instances FS1 and FS2 according to particular embodiments.

FIG. 5 illustrates example interactions between a client and host machines on which different portions of a VFS instance are stored according to particular embodiments.

FIG. 6 is a schematic illustration of a system arranged in accordance with examples described herein.

FIG. 7 is a flowchart depicting a method of processing requests received at a file server manager arranged in accordance with examples described herein.

FIG. 8 is a schematic illustration of a computing system arranged in accordance with examples described herein.

FIG. 9 is a schematic illustration of a system arranged in accordance with examples described herein.

FIG. 10 is a flowchart depicting an example process for switching between application level and share level replication policies in accordance with examples described herein.

DETAILED DESCRIPTION

Various embodiments of the present disclosure will be explained below in detail with reference to the accompanying drawings. Other embodiments may be utilized, and structural, logical and electrical changes may be made without departing from the scope of the present disclosure.

Certain details are set forth herein to provide an understanding of described embodiments of technology. However, other examples may be practiced without various of these particular details. In some instances, well-known computing system components, virtualization operations, and/or software operations have not been shown in detail in order to avoid unnecessarily obscuring the described embodiments. Other embodiments may be utilized, and other changes may be made, without departing from the spirit or scope of the subject matter presented here.

Examples described herein include replication of one or more virtualized file servers or portions of virtualized file servers. Replication may be performed such that a secondary virtualized file server is prepared which may serve as a fail-over site for an initial virtualized file server. The virtualized file server may host or otherwise make available a file system which may include one or more shares. There may be various mechanisms for protecting the virtualized file server or implementing replication policies for the virtualized file server. In some embodiments, application-level replication (e.g., file server level replication) may be performed. While application-level replication is described herein with reference to file servers, in other examples other applications may be replicated using techniques and systems described herein. Application-level replication generally refers to a replication process that creates a shared snapshot of an application (e.g., a file server) between a source and destination system (e.g., source and destination file servers). An initial snapshot, sometimes referred to as an L0 snapshot may initially be taken of the primary file server, replicated to the destination file server and used to provide or maintain the destination file server to be prepared for a fail-over from the primary file server. During application-level replication, the entire file server (e.g., virtualized computing instances and data) may be snapshotted. The initial L0 snapshot may be followed by subsequent delta snapshots that may communicate only differences with the initial snapshot.

In other examples, share-level replication may be used. During share-level replication, share-specific replication policies may be maintained. A snapshot of one, some, or all shares of a source file server may be taken and replicated to the destination file server. A replication policy may be set on a per-share basis such that some shares may have more frequent replication than other shares, for example. After an initial snapshot of a share is performed, subsequent snapshots may be delta snapshots that communicate only differences since a last snapshot.

In some examples, it may be desirable to switch between methods of replication. For example, a system may be established using application-level replication. An initial L0 snapshot of the file server may be taken and replicated to provide the secondary file server. File server replication may occur, with delta snapshots of the file server being replicated in accordance with an application-level replication policy. However, a user, process, and/or administrator may want to change or update the system to utilize share level replication. For example, a user may desire to set different policies for different shares and may want to implement share level replication.

In order to change from application-level replication to share-level replication, it may be necessary, however, to take another L0 snapshot to begin a different replication process. However, an L0 snapshot representing a file server may be quite large—terabytes of data in some examples. It may be cumbersome or undesirable to repeat an L0 snapshot of the file server in order to allow for share-level replication in a system that had previously been implementing application level replication. Taking and replicating the L0 snapshot may take hours, days, weeks, moths, or longer, in some examples. In one example, it may take 2.5 months to complete transferring around 700 TB of data. Accordingly, it may be desirable to avoid or reduce such delay when switching between application-level and share-level replication. System administrators may be already running file servers where initial replication (e.g., L0 snapshot replication) had been completed in the past, such as years ago. It may be desirable to be able to use the benefit of the prior application-level replication when switching to share level replication.

Examples of methods and systems described herein accordingly provide for switching between application-level and share-level replication without a need, or with a reduced need, to conduct another L0 or base level snapshot. Share-level replication may be initiated using a previous base level (e.g., L0) snapshot taken when an application-level replication policy was in place.

Examples described herein are concerned with virtualized file servers. Examples of virtualized file servers described herein may include a cluster of virtualized computing instances. Virtualized computing instances may generally refer to one or more virtual machines, containers, or other instances that virtualize computing resources (e.g., compute resources such as processor(s), memory, and/or storage). Examples herein may be described with reference to virtual machines, but it should be understood that the virtual machines represent virtualized computing instances that could be implemented with containers, or a combination of virtual machines and containers. Hypervisors may or may not be used accordingly.

Examples of systems and methods described herein may include one or more virtualized file servers. Examples of virtualized file servers are described in, for example, U.S. Published Patent Application 2017/0235760, entitled “Virtualized file server,” published Aug. 17, 2017 on U.S. application Ser. No. 15/422,220, filed Feb. 1, 2017, both of which documents are hereby incorporated by reference in their entirety for any purpose.

FIG. 1 is a schematic illustration of a clustered virtualization environment 700 implementing a virtualized file server (VFS 732) according to particular embodiments. In particular embodiments, the VFS 732 provides file services to user VMs 714, 718, 722, 726, 730, and 734. Each user VM may be a client as used herein. The file services may include storing and retrieving data persistently, reliably, and efficiently. The user virtual machines may execute user processes, such as office applications or the like, on host machines 702, 708, and 716. The stored data may be represented as a set of storage items, such as files organized in a hierarchical structure of folders (also known as directories), which can contain files and other folders, and shares, which can also contain files and folders. VFS 732 is depicted as including a plurality of file server VMs. In some examples, other components may additionally be included in what is referred to as VFS, such as storage pool 756 and/or one or more hypervisors and controller/service VMs shown in FIG. 1 .

The architectures of FIG. 1 can be implemented for a distributed platform that contains multiple host machines 702, 716, and 708 that manage multiple tiers of storage. The multiple tiers of storage may include storage that is accessible through network 754, such as, by way of example and not limitation, cloud storage 706 (e.g., which may be accessible through the Internet), network-attached storage 710 (NAS) (e.g., which may be accessible through a LAN), or a storage area network (SAN). Examples described herein also permit local storage 748, 750, and 752 that is incorporated into or directly attached to the host machine and/or appliance to be managed as part of storage pool 756. Examples of such local storage include Solid State Drives (henceforth “SSDs”), Hard Disk Drives (henceforth “HDDs” or “spindle drives”), optical disk drives, external drives (e.g., a storage device connected to a host machine via a native drive interface or a serial attached SCSI interface), or any other direct-attached storage. These storage devices, both direct-attached and network-accessible, collectively form storage pool 756. Virtual disks (or “vDisks”) may be structured from the physical storage devices in storage pool 756. As used herein, the term vDisk refers to the storage abstraction that is exposed by a component of the virtualization platform, such as a Controller/Service VM (CVM) (e.g., CVM 736) and/or a hypervisor or other storage controller to be used by a user VM (e.g., user VM 714). In particular embodiments, the vDisk may be exposed via iSCSI (“internet small computer system interface”) or NFS (“network filesystem”) and is mounted as a virtual disk on the user VM. In particular embodiments, vDisks may be organized into one or more volume groups (VGs).

Each host machine 702, 716, 708 may run virtualization software, such as VMWARE ESX(I), MICROSOFT HYPER-V, or REDHAT KVM. The virtualization software includes hypervisors 742, 744, and 746 to create, manage, and destroy user VMs, as well as managing the interactions between the underlying hardware and user VMs. User VMs may run one or more applications that may operate as “clients” with respect to other elements within clustered virtualization environment 700. A hypervisor may connect to network 754. In particular embodiments, a host machine 702, 708, or 716 may be a physical hardware computing device; in particular embodiments, a host machine 702, 708, or 716 may be a virtual machine.

CVMs 736, 738, and 740 are used to manage storage and input/output (“I/O”) activities according to particular embodiments. These special VMs may act as the storage controller in some example architectures. Multiple such storage controllers may coordinate within a cluster to form a unified storage controller system. CVMs may run as virtual machines on the various host machines, and work together to form a distributed system that manages all the storage resources in a storage pool, including for example local storage, network-attached storage 710, and cloud storage 706. The CVMs may connect to network 754 directly, or via a hypervisor. Since the CVMs run independent of hypervisors 742, 744, 746, this means that the current approach can be used and implemented within any virtual machine architecture, since the CVMs of particular embodiments can be used in conjunction with any hypervisor from any virtualization vendor. In some examples, CVMs may not be used and one or more hypervisors (e.g., hypervisors 742, 744, and/or 746) may perform the functions described with respect to the CVMs. In some examples, one or more CVMs may not be present, and the hypervisor or other component hosted on the computing nodes may provide the functions attributed to the CVM herein. In analogous manner, in some examples, VMs may not be present and containers may be used additionally or instead.

A host machine may be designated as a leader node within a cluster of host machines. For example, host machine 708 may be a leader node. A leader node may have a software component designated to perform operations of the leader. For example, CVM 738 on host machine 708 may be designated to perform such operations. A leader may be responsible for monitoring or handling requests from other host machines or software components on other host machines throughout the virtualized environment. If a leader fails, a new leader may be designated. In particular embodiments, a management module (e.g., in the form of an agent) may be running on the leader node and/or in communication with the leader node or virtual machines or containers on the leader node. For example, file server managers described herein may be in communication with the leader node in some examples.

Each CVM 736, 738, and 740 exports one or more block devices or NFS server targets that appear as disks to user VMs 714, 718, 722, 726, 730, and 734. These disks are virtual, since they are implemented by the software running inside CVMs 736, 738, and 740. Thus, to user VMs, CVMs appear to be exporting a clustered storage appliance that contains some disks. All user data (including the operating system) in the user VMs may reside on these virtual disks.

Significant performance advantages can be gained by allowing the virtualization system to access and utilize local storage 748, 750, and 752 as disclosed herein. This is because I/O performance is typically much faster when performing access to local storage as compared to performing access to network-attached storage 710 across a network 754. This faster performance for locally attached storage can be increased even further by using certain types of optimized local storage devices, such as SSDs. Further details regarding methods and mechanisms for implementing examples of the virtualization environment illustrated in FIG. 1 are described in U.S. Pat. No. 8,601,473, which is hereby incorporated by reference in its entirety.

As a user VM performs I/O operations (e.g., a read operation or a write operation), the I/O commands of the user VM may be sent to the hypervisor that shares the same server as the user VM. For example, the hypervisor may present to the virtual machines an emulated storage controller, receive an I/O command and facilitate the performance of the I/O command (e.g., via interfacing with storage that is the object of the command, or passing the command to a service that will perform the I/O command). An emulated storage controller may facilitate I/O operations between a user VM and a vDisk. A vDisk may present to a user VM as one or more discrete storage drives, but each vDisk may correspond to any part of one or more drives within storage pool 756. Additionally or alternatively, CVMs 736, 738, 740 may present an emulated storage controller either to the hypervisor or to user VMs to facilitate I/O operations. CVMs 736, 738, and 740 may be connected to storage within storage pool 756. CVM 736 may have the ability to perform I/O operations using local storage 748 within the same host machine 702, by connecting via network 754 to cloud storage 706 or network-attached storage 710, or by connecting via network 754 to local storage 750 or 752 within another host machine 708 or 716 (e.g., via connecting to another CVM 738 or 740). In particular embodiments, any suitable computing system may be used to implement a host machine.

In particular embodiments, the VFS 732 may include a set of File Server Virtual Machines (FSVMs) 704, 712, and 720 that execute on host machines 702, 708, and 716 and process storage item access operations requested by user VMs executing on the host machines 702, 708, and 716. The FSVMs 704, 712, and 720 may communicate with storage controllers provided by CVMs 736, 744, 740 and/or hypervisors executing on the host machines 702, 708, 716 to store and retrieve files, folders, SMB shares, or other storage items on local storage 748, 750, 752 associated with, e.g., local to, the host machines 702, 708, 716. The FSVMs 704, 712, 720 may store and retrieve block-level data on the host machines 702, 708, 716, e.g., on the local storage 748, 750, 752 of the host machines 702, 708, 716. The block-level data may include block-level representations of the storage items (e.g., files, shares). The network protocol used for communication between user VMs, FSVMs, and CVMs via the network 754 may be Internet Small Computer Systems Interface (iSCSI), Server Message Block (SMB), Network Filesystem (NFS), pNFS (Parallel NFS), or another appropriate protocol.

For the purposes of VFS 732, host machine 716 may be designated as a leader node within a cluster of host machines. In this case, FSVM 720 on host machine 716 may be designated to perform such operations. A leader may be responsible for monitoring or handling requests from FSVMs on other host machines throughout the virtualized environment. If FSVM 720 fails, a new leader may be designated for VFS 732.

In particular embodiments, the user VMs may send data to the VFS 732 (e.g., to the FSVMs) using write requests, and may receive data from it using read requests. The read and write requests, and their associated parameters, data, and results, may be sent between a user VM and one or more file server VMs (FSVMs) located on the same host machine as the user VM or on different host machines from the user VM. The read and write requests may be sent between host machines 702, 708, 716 via network 754, e.g., using a network communication protocol such as iSCSI, CIFS, SMB, TCP, IP, or the like. When a read or write request is sent between two VMs located on the same one of the host machines 702, 708, 716 (e.g., between the user VM 714 and the FSVM 704 located on the host machine 702), the request may be sent using local communication within the host machine 702 instead of via the network 754. As described above, such local communication may be substantially faster than communication via the network 754. The local communication may be performed by, e.g., writing to and reading from shared memory accessible by the user VM 714 and the FSVM 704, sending and receiving data via a local “loopback” network interface, local stream communication, or the like.

In particular embodiments, the storage items stored by the VFS 732, such as files, folders, and/or shares may be distributed amongst the storage pool, and may be accessed and/or managed by multiple FSVMs 704, 712, 720. In particular embodiments, when storage access requests are received from the user VMs, the VFS 732 identifies FSVMs 704, 712, 720 at which requested storage items, e.g., folders, files, or portions thereof, are stored, and directs the user VMs to the locations of the storage items. The FSVMs 704, 712, 720 or another component of the host machines, may maintain a storage map, such as a sharding map, that maps names or identifiers of storage items to their corresponding locations. The storage map may be a distributed data structure of which copies are maintained at each host machine and/or FSVM 704, 712, 720 and accessed using distributed locks or other storage item access operations. Alternatively, the storage map may be maintained by an FSVM at a leader node such as the FSVM 720, and the other FSVMs 704 and 712 may send requests to query and update the storage map to the leader FSVM 720. Other implementations of the storage map are possible using appropriate techniques to provide asynchronous data access to a shared resource by multiple readers and writers. The storage map may map names or identifiers of storage items in the form of text strings or numeric identifiers, such as folder names, files names, and/or identifiers of portions of folders or files (e.g., numeric start offset positions and counts in bytes or other units) to locations of the files, folders, or portions thereof. Locations may be represented as names of FSVMs, e.g., “FSVM-1”, as network addresses of host machines on which FSVMs are located (e.g., “ip-addr1” or 128.1.1.10), or as other types of location identifiers.

When a user application executing in a user VM 714 on one of the host machines 702 initiates a storage access operation, such as reading or writing data, the user VM 714 may send the storage access operation in a request to one of the FSVMs 704, 712, 720 on one of the host machines 702, 708, 716. A FSVM 712 executing on a host machine 708 that receives a storage access request may use the storage map to determine whether the requested file or folder is located in the storage pool and/or on the FSVM 712. In some examples, if the requested file or folder is located on the FSVM 712, the FSVM 712 executes the requested storage access operation. Otherwise, the FSVM 712 responds to the request with an indication that the data is not on the FSVM 712, and may redirect the requesting user VM 714 to the FSVM on which the storage map indicates the file or folder is located. The client may cache the address of the FSVM on which the file or folder is located, so that it may send subsequent requests for the file or folder directly to that FSVM.

As an example and not by way of limitation, the location of a file or a folder may be pinned to a particular FSVM 704 by sending a file service operation that creates the file or folder to a CVM 736 and/or hypervisor 742 associated with (e.g., located on the same host machine as) the FSVM 704. The CVM 736 subsequently processes file service commands for that file for the FSVM 704 and sends corresponding storage access operations to storage devices associated with the file. The CVM 736 may associate local storage 748 with the file if there is sufficient free space on local storage 748. Alternatively, the CVM 736 may associate a storage device located on another host machine 702, e.g., in local storage 750, with the file under certain conditions, e.g., if there is insufficient free space on the local storage 748, or if storage access operations between the CVM 736 and the file are expected to be infrequent. Files and folders, or portions thereof, may also be stored on other storage devices, such as the network-attached storage (NAS) network-attached storage 710 or the cloud storage 706 of the storage pool 756.

In particular embodiments, a name service 724, such as that specified by the Domain Name System (DNS) Internet protocol, may communicate with the host machines 702, 708, 716 via the network 754 and may store a database of domain name (e.g., host name) to IP address mappings. The domain names may correspond to FSVMs, e.g., fsvm1.domain.com or ip-addr1.domain.com for an FSVM named FSVM-1. The name service 724 may be queried by the user VMs to determine the IP address of a particular host machine 702, 708, 716 given a name of the host machine, e.g., to determine the IP address of the host name ip-addr1 for the host machine 702. The name service 724 may be located on a separate server computer system or on one or more of the host machines 702, 708, 716. The names and IP addresses of the host machines of the VFS 732, e.g., the host machines 702, 708, 716, may be stored in the name service 724 so that the user VMs may determine the IP address of each of the host machines 702, 708, 716, or FSVMs 704, 712, 720. The name of each VFS instance, e.g., each file system such as FS1, FS2, or the like, may be stored in the name service 724 in association with a set of one or more names that contains the name(s) of the host machines 702, 708, 716 or FSVMs 704, 712, 720 of the VFS instance VFS 732. The FSVMs 704, 712, 720 may be associated with the host names ip-addr1, ip-addr2, and ip-addr3, respectively. For example, the file server instance name FS1.domain.com may be associated with the host names ip-addr1, ip-addr2, and ip-addr3 in the name service 724, so that a query of the name service 724 for the server instance name “FS1” or “FS1.domain.com” returns the names ip-addr1, ip-addr2, and ip-addr3. As another example, the file server instance name FS1.domain.com may be associated with the host names fsvm-1, fsvm-2, and fsvm-3. Further, the name service 724 may return the names in a different order for each name lookup request, e.g., using round-robin ordering, so that the sequence of names (or addresses) returned by the name service for a file server instance name is a different permutation for each query until all the permutations have been returned in response to requests, at which point the permutation cycle starts again, e.g., with the first permutation. In this way, storage access requests from user VMs may be balanced across the host machines, since the user VMs submit requests to the name service 724 for the address of the VFS instance for storage items for which the user VMs do not have a record or cache entry, as described below.

In particular embodiments, each FSVM may have two IP addresses: an external IP address and an internal IP address. The external IP addresses may be used by SMB/CIFS clients, such as user VMs, to connect to the FSVMs. The external IP addresses may be stored in the name service 724. The IP addresses ip-addr1, ip-addr2, and ip-addr3 described above are examples of external IP addresses. The internal IP addresses may be used for iSCSI communication to CVMs and/or hypervisors, e.g., between the FSVMs 704, 712, 720 and the CVMs 736, 744, 740 and/or hypervisors 742, 744, and/or 746. Other internal communications may be sent via the internal IP addresses as well, e.g., file server configuration information may be sent from the CVMs to the FSVMs using the internal IP addresses, and the CVMs may get file server statistics from the FSVMs via internal communication as needed.

Since the VFS 732 is provided by a distributed set of FSVMs 704, 712, 720, the user VMs that access particular requested storage items, such as files or folders, do not necessarily know the locations of the requested storage items when the request is received. A distributed file system protocol, e.g., MICROSOFT DFS or the like, may therefore be used, in which a user VM 714 may request the addresses of FSVMs 704, 712, 720 from a name service 724 (e.g., DNS). The name service 724 may send one or more network addresses of FSVMs 704, 712, 720 to the user VM 714, in an order that changes for each subsequent request. These network addresses are not necessarily the addresses of the FSVM 712 on which the storage item requested by the user VM 714 is located, since the name service 724 does not necessarily have information about the mapping between storage items and FSVMs 704, 712, 720. Next, the user VM 714 may send an access request to one of the network addresses provided by the name service, e.g., the address of FSVM 712. The FSVM 712 may receive the access request and determine whether the storage item identified by the request is located on the FSVM 712. If so, the FSVM 712 may process the request and send the results to the requesting user VM 714. However, if the identified storage item is located on a different FSVM 720, then the FSVM 712 may redirect the user VM 714 to the FSVM 720 on which the requested storage item is located by sending a “redirect” response referencing FSVM 720 to the user VM 714. The user VM 714 may then send the access request to FSVM 720, which may perform the requested operation for the identified storage item.

A particular virtualized file server, such as VFS 732, including the items it stores, e.g., files and folders, may be referred to herein as a VFS “instance” and/or a file system and may have an associated name, e.g., FS1, as described above. Although a VFS instance may have multiple FSVMs distributed across different host machines, with different files being stored on FSVMs, the VFS instance may present a single name space to its clients such as the user VMs. The single name space may include, for example, one or more named “shares” and each share may have an associated folder hierarchy in which files are stored. Storage items such as files and folders may have associated names and metadata such as permissions, access control information, size quota limits, file types, files sizes, and so on. As another example, the name space may be a single folder hierarchy, e.g., a single root directory that contains files and other folders. User VMs may access the data stored on a distributed VFS instance via storage access operations, such as operations to list folders and files in a specified folder, create a new file or folder, open an existing file for reading or writing, and read data from or write data to a file, as well as storage item manipulation operations to rename, delete, copy, or get details, such as metadata, of files or folders. Note that folders may also be referred to herein as “directories.”

In particular embodiments, storage items such as files and folders in a file server namespace may be accessed by clients such as user VMs by name, e.g., “\Folder-1 \File-1” and “\Folder-2\File-2” for two different files named File-1 and File-2 in the folders Folder-1 and Folder-2, respectively (where Folder-1 and Folder-2 are sub-folders of the root folder). Names that identify files in the namespace using folder names and file names may be referred to as “path names.” Client systems may access the storage items stored on the VFS instance by specifying the file names or path names, e.g., the path name “\Folder-1 \File-1”, in storage access operations. If the storage items are stored on a share (e.g., a shared drive), then the share name may be used to access the storage items, e.g., via the path name “\\Share-1\Folder-1 \File-1” to access File-1 in folder Folder-1 on a share named Share-1.

In particular embodiments, although the VFS instance may store different folders, files, or portions thereof at different locations, e.g., on or associated with different FSVMs, the use of different FSVMs or other elements of storage pool 756 to store the folders and files may be hidden from the accessing clients. The share name is not necessarily a name of a location such as an FSVM or host machine. For example, the name Share-1 does not identify a particular FSVM on which or associated with the location of storage items of the share. The share Share-1 may have portions of storage items stored on three host machines, but a user may simply access Share-1, e.g., by mapping Share-1 to a client computer, to gain access to the storage items on Share-1 as if they were located on the client computer. Names of storage items, such as file names and folder names, are similarly location-independent. Thus, although storage items, such as files and their containing folders and shares, may be stored at different locations, such as different host machines, the files may be accessed in a location-transparent manner by clients (such as the user VMs). Thus, users at client systems need not specify or know the locations of each storage item being accessed. The VFS may automatically map the file names, folder names, or full path names to the locations at which the storage items are stored. As an example and not by way of limitation, a storage item's location may be specified by the name, address, or identity of the FSVM that provides access to the storage item on the host machine on which the storage item is located. A storage item such as a file may be divided into multiple parts that may be located on different FSVMs, in which case access requests for a particular portion of the file may be automatically mapped to the location of the portion of the file based on the portion of the file being accessed (e.g., the offset from the beginning of the file and the number of bytes being accessed).

In particular embodiments, VFS 732 determines the location, e.g., FSVM and/or location in the storage pool, at which to store a storage item when the storage item is created. For example, a FSVM 704 may attempt to create a file or folder using a CVM 736 on the same host machine 702 as the user VM 718 that requested creation of the file, so that the CVM 736 that controls access operations to the file folder is co-located with the user VM 718. In this way, since the user VM 718 is known to be associated with the file or folder and is thus likely to access the file again, e.g., in the near future or on behalf of the same user, access operations may use local communication or short-distance communication to improve performance, e.g., by reducing access times or increasing access throughput. If there is a local CVM on the same host machine as the FSVM, the FSVM may identify it and use it by default. If there is no local CVM on the same host machine as the FSVM, a delay may be incurred for communication between the FSVM and a CVM on a different host machine. Further, the VFS 732 may also attempt to store the file on a storage device that is local to the CVM being used to create the file, such as local storage, so that storage access operations between the CVM and local storage may use local or short-distance communication.

In particular embodiments, if a CVM is unable to store the storage item in local storage of a host machine on which an FSVM resides, e.g., because local storage does not have sufficient available free space, then the file may be stored in local storage of a different host machine. In this case, the stored file is not physically local to the host machine, but storage access operations for the file are performed by the locally-associated CVM and FSVM, and the CVM may communicate with local storage on the remote host machine using a network file sharing protocol, e.g., iSCSI, SAMBA, or the like.

In particular embodiments, if a virtual machine, such as a user VM 714, CVM 736, or FSVM 704, moves from a host machine 702 to a destination host machine 708, e.g., because of resource availability changes, and data items such as files or folders associated with the VM are not locally accessible on the destination host machine 708, then data migration may be performed for the data items associated with the moved VM to migrate them to the new host machine 708, so that they are local to the moved VM on the new host machine 708. FSVMs may detect removal and addition of CVMs (as may occur, for example, when a CVM fails or is shut down) via the iSCSI protocol or other technique, such as heartbeat messages. As another example, a FSVM may determine that a particular file's location is to be changed, e.g., because a disk on which the file is stored is becoming full, because changing the file's location is likely to reduce network communication delays and therefore improve performance, or for other reasons. Upon determining that a file is to be moved, VFS 732 may change the location of the file by, for example, copying the file from its existing location(s), such as local storage 748 of a host machine 702, to its new location(s), such as local storage 750 of host machine 708 (and to or from other host machines, such as local storage 752 of host machine 716 if appropriate), and deleting the file from its existing location(s). Write operations on the file may be blocked or queued while the file is being copied, so that the copy is consistent. The VFS 732 may also redirect storage access requests for the file from an FSVM at the file's existing location to a FSVM at the file's new location.

In particular embodiments, VFS 732 includes at least three File Server Virtual Machines (FSVMs) 704, 712, 720 located on three respective host machines 702, 708, 716. To provide high-availability, there may be a maximum of one FSVM for a particular VFS instance VFS 732 per host machine in a cluster. If two FSVMs are detected on a single host machine, then one of the FSVMs may be moved to another host machine automatically, or the user (e.g., system administrator and/or file server manager) may be notified to move the FSVM to another host machine. The user and/or file server manager may move a FSVM to another host machine using an administrative interface that provides commands for starting, stopping, and moving FSVMs between host machines.

In particular embodiments, two FSVMs of different VFS instances may reside on the same host machine. If the host machine fails, the FSVMs on the host machine become unavailable, at least until the host machine recovers. Thus, if there is at most one FSVM for each VFS instance on each host machine, then at most one of the FSVMs may be lost per VFS per failed host machine. As an example, if more than one FSVM for a particular VFS instance were to reside on a host machine, and the VFS instance includes three host machines and three FSVMs, then loss of one host machine would result in loss of two-thirds of the FSVMs for the VFS instance, which would be more disruptive and more difficult to recover from than loss of one-third of the FSVMs for the VFS instance.

In particular embodiments, users, such as system administrators or other users of the user VMs, may expand the cluster of FSVMs by adding additional FSVMs. Each FSVM may be associated with at least one network address, such as an IP (Internet Protocol) address of the host machine on which the FSVM resides. There may be multiple clusters, and all FSVMs of a particular VFS instance are ordinarily in the same cluster. The VFS instance may be a member of a MICROSOFT ACTIVE DIRECTORY domain, which may provide authentication and other services such as name service.

FIG. 2 illustrates data flow within a clustered virtualization environment 800 implementing a VFS instance (e.g., VFS 732) in which stored items such as files and folders used by user VMs are stored locally on the same host machines as the user VMs according to particular embodiments. As described above, one or more user VMs and a Controller/Service VM and/or hypervisor may run on each host machine. In some examples, controller/service VMs may not be used, and the hypervisor and/or a container may perform the functions described with reference to controller/service VMs. In some examples, containers may be used instead of or in addition to VMs. As a user VM processes I/O commands (e.g., a read or write operation), the I/O commands may be sent to the hypervisor on the same server or host machine as the user VM. For example, the hypervisor may present to the user VMs a VFS instance, receive an I/O command, and facilitate the performance of the I/O command by passing the command to a FSVM that performs the operation specified by the command. The VFS may facilitate I/O operations between a user VM and a virtualized file system. The virtualized file system may appear to the user VM as a namespace of mappable shared drives or mountable network file systems of files and directories. The namespace of the virtualized file system may be implemented using storage devices in the local storage, such as disks, onto which the shared drives or network file systems, files, and folders, or portions thereof, may be distributed as determined by the FSVMs. The VFS may thus provide features disclosed herein, such as efficient use of the disks, high availability, scalability, and others. The implementation of these features may be transparent to the user VMs. The FSVMs may present the storage capacity of the disks of the host machines as an efficient, highly-available, and scalable namespace in which the user VMs may create and access shares, files, folders, and the like.

As an example, a network share may be presented to a user VM as one or more discrete virtual disks, but each virtual disk may correspond to any part of one or more virtual or physical disks within a storage pool. Additionally or alternatively, the FSVMs may present a VFS either to the hypervisor or to user VMs of a host machine to facilitate I/O operations. The FSVMs may access the local storage via Controller/Service VMs, other storage controllers, hypervisors, or other components of the host machine. As described herein, a CVM 736 may have the ability to perform I/O operations using local storage 748 within the same host machine 702 by connecting via the network 754 to cloud storage or NAS, or by connecting via the network 754 to 750, 752 within another host machine 708, 716 (e.g., by connecting to another CVM 738, 740).

In particular embodiments, each user VM may access one or more virtual disk images stored on one or more disks of the local storage, the cloud storage, and/or the NAS. The virtual disk images may contain data used by the user VMs, such as operating system images, application software, and user data, e.g., user home folders and user profile folders. For example, FIG. 2 illustrates three virtual machine images 810, 808, 812. The virtual machine image 810 may be a file named UserVM.vmdisk (or the like) stored on disk 802 of local storage 748 of host machine 702. The virtual machine image 810 may store the contents of the user VM 714's hard drive. The disk 802 on which the virtual machine image 810 is “local to” the user VM 714 on host machine 702 because the disk 802 is in local storage 748 of the host machine 702 on which the user VM 714 is located. Thus, the user VM 714 may use local (intra-host machine) communication to access the virtual machine image 810 more efficiently, e.g., with less latency and higher throughput, than would be the case if the virtual machine image 810 were stored on disk 804 of local storage 750 of a different host machine 708, because inter-host machine communication across the network 754 would be used in the latter case. Similarly, a virtual machine image 808, which may be a file named UserVM.vmdisk (or the like), is stored on disk 804 of local storage 750 of host machine 708, and the image 808 is local to the user VM 722 located on host machine 708. Thus, the user VM 722 may access the virtual machine image 808 more efficiently than the virtual machine 718 on host machine 702, for example. In another example, the CVM 740 may be located on the same host machine 716 as the user VM 730 that accesses a virtual machine image 812 (UserVM.vmdisk) of the user VM 730, with the virtual machine image file 812 being stored on a different host machine 708 than the user VM 730 and the CVM 740. In this example, communication between the user VM 730 and the CVM 740 may still be local, e.g., more efficient than communication between the user VM 730 and a CVM 738 on a different host machine 708, but communication between the CVM 740 and the disk 804 on which the virtual machine image 812 is stored is via the network 754, as shown by the dashed lines between CVM 740 and the network 754 and between the network 754 and local storage 750. The communication between CVM 740 and the disk 804 is not local, and thus may be less efficient than local communication such as may occur between the CVM 740 and a disk 806 in local storage 752 of host machine 716. Further, a user VM 730 on host machine 716 may access data such as the virtual disk image 812 stored on a remote (e.g., non-local) disk 804 via network communication with a CVM 738 located on the remote host machine 708. This case may occur if CVM 740 is not present on host machine 716, e.g., because CVM 740 has failed, or if the FSVM 720 has been configured to communicate with 750 on host machine 708 via the CVM 738 on host machine 708, e.g., to reduce computational load on host machine 716.

In particular embodiments, since local communication is expected to be more efficient than remote communication, the FSVMs may store and/or be associated with storage items, such as files or folders, e.g., the virtual disk images, as block-level data on local storage of the host machine on which the user VM that is expected to access the files is located. A user VM may be expected to access particular storage items if, for example, the storage items are associated with the user VM, such as by configuration information. For example, the virtual disk image 810 may be associated with the user VM 714 by configuration information of the user VM 714. Storage items may also be associated with a user VM via the identity of a user of the user VM. For example, files and folders owned by the same user ID as the user who is logged into the user VM 714 may be associated with the user VM 714. If the storage items expected to be accessed by a user VM 714 are not stored on the same host machine 702 as the user VM 714, e.g., because of insufficient available storage capacity in local storage 748 of the host machine 702, or because the storage items are expected to be accessed to a greater degree (e.g., more frequently or by more users) by a user VM 722 on a different host machine 708, then the user VM 714 may still communicate with a local CVM 736 to access the storage items located on the remote host machine 708, and the local CVM 736 may communicate with local storage 750 on the remote host machine 708 to access the storage items located on the remote host machine 708. If the user VM 714 on a host machine 702 does not or cannot use a local CVM 736 to access the storage items located on the remote host machine 708, e.g., because the local CVM 736 has crashed or the user VM 714 has been configured to use a remote CVM 738, then communication between the user VM 714 and local storage 750 on which the storage items are stored may be via a remote CVM 738 using the network 754, and the remote CVM 738 may access local storage 750 using local communication on host machine 708. As another example, a user VM 714 on a host machine 702 may access storage items located on a disk 806 of local storage 752 on another host machine 716 via a CVM 738 on an intermediary host machine 708 using network communication between the host machines 702 and 708 and between the host machines 708 and 716.

FIG. 3 illustrates an example hierarchical structure of a VFS instance (e.g., a file system) in a cluster (such as a virtualized file server) according to particular embodiments. A Cluster 902 contains two VFS instances, FS1 904 and FS2 906. For example, the 902 may be used to implement and/or may be implemented by any virtualized file server described herein. Each VFS instance as shown in FIG. 3 may be identified by a name such as “\\instance”, e.g., “\\FS1” for WINDOWS file systems, or a name such as “instance”, e.g., “FS1” for UNIX-type file systems. The VFS instance FS1 904 contains shares, including Share-1 908 and Share-2 910. Shares may have names such as “Users” for a share that stores user home directories, or the like. Each share may have a path name such as \\FS1 \Share-1 or \\FS1\Users. As an example and not by way of limitation, a share may correspond to a disk partition or a pool of file system blocks on WINDOWS and UNIX-type file systems. As another example and not by way of limitation, a share may correspond to a folder or directory on a VFS instance. Shares may appear in the file system instance as folders or directories to users of user VMs. Share-1 908 includes two folders, Folder-1 916, and Folder-2 918, and may also include one or more files (e.g., files not in folders). Each folder 916, 918 may include one or more files 922, 924. Share-2 910 includes a folder Folder-3 912, which includes a file File-2 914. Each folder has a folder name such as “Folder-1”, “Users”, or “Sam” and a path name such as “\\FS1\Share-1\Folder-1” (WINDOWS) or “share-1:/fs1/Users/Sam” (UNIX). Similarly, each file has a file name such as “File-1” or “Forecast.xls” and a path name such as “\\FS1 \Share-1\Folder-1 \File-1” or “share-1:/fs1/Users/Sam/Forecast.xls”.

FIG. 4 illustrates two example host machines 1004 and 1006, each providing file storage services for portions of two VFS instances FS1 and FS2 according to particular embodiments. The first host machine, Host-1 702, includes two user VMs 1008, 1010, a Hypervisor 1016, a FSVM named FileServer-VM-1 (abbreviated FSVM-1) 1020, a Controller/Service VM named CVM-1 1024, and local storage 1028. Host-1's FileServer-VM-1 1020 has an IP (Internet Protocol) network address of 10.1.1.1, which is an address of a network interface on Host-1 1004. Host-1 has a hostname ip-addr1, which may correspond to Host-1's IP address 10.1.1.1. The second host machine, Host-2 1006, includes two user VMs 1012, 1014, a Hypervisor 1018, a File Server VM named FileServer-VM-2 (abbreviated FSVM-2) 1022, a Controller/Service VM named CVM-2 1026, and local storage 1030. Host-2's FileServer-VM-2 1022 has an IP network address of 10.1.1.2, which is an address of a network interface on Host-2 1006.

In particular embodiments, file systems FileSystem-1A 1042 and FileSystem-2A 1040 implement the structure of files and folders for portions of the FS1 and FS2 file server instances, respectively, that are located on (e.g., served by) FileServer-VM-1 1020 on Host-1 1004. Other file systems on other host machines may implement other portions of the FS1 and FS2 file server instances. The file systems 1042 and 1040 may implement the structure of at least a portion of a file server instance by translating file system operations, such as opening a file, writing data to or reading data from the file, deleting a file, and so on, to disk I/O operations such as seeking to a portion of the disk, reading or writing an index of file information, writing data to or reading data from blocks of the disk, allocating or de-allocating the blocks, and so on. The file systems 1042, 1040 may thus store their file system data, including the structure of the folder and file hierarchy, the names of the storage items (e.g., folders and files), and the contents of the storage items on one or more storage devices, such as local storage 1028. The particular storage device or devices on which the file system data for each file system are stored may be specified by an associated file system pool (e.g., 1048 and 1050). For example, the storage device(s) on which data for FileSystem-1A 1042 and FileSystem-2A, 1040 are stored may be specified by respective file system pools FS1-Pool-1 1048 and FS2-Pool-2 1050. The storage devices for the pool may be selected from volume groups provided by CVM-1 1024 or other component of a host machine, such as volume group VG1 1032 and volume group VG2 1034. Each volume group 1032, 1034 may include a group of one or more available storage devices that are present in local storage 1028 associated with (e.g., by iSCSI communication) the CVM-1 1024. The CVM-1 1024 may be associated with a local storage 1028 on the same host machine 702 as the CVM-1 1024, or with a local storage 1030 on a different host machine 1006. The CVM-1 1024 may also be associated with other types of storage, such as cloud storage, networked storage or the like. Although the examples described herein include particular host machines, virtual machines, file servers, file server instances, file server pools, CVMs, volume groups, and associations there between, any number of host machines, virtual machines, file servers, file server instances, file server pools, CVMs, volume groups, and any associations there between are possible and contemplated.

In particular embodiments, the file system pool 1048 may associate any storage device in one of the volume groups 1032, 1034 of storage devices that are available in local storage 1028 with the file system FileSystem-1A 1042. For example, the file system pool FS1-Pool-1 1048 may specify that a disk device named hd1 in the volume group VG1 1032 of local storage 1028 is a storage device for FileSystem-1A 1042 for file server FS1 on or associated with FSVM-1 1020. A file system pool FS2-Pool-2 1050 may specify a storage device FileSystem-2A 1050 for file server FS2 on FSVM-1 1020. The storage device for FileSystem-2A 1040 may be, e.g., the disk device hd1, or a different device in one of the volume groups 1032, 1034, such as a disk device named hd2 in volume group VG2 1034. Each of the file systems FileSystem-1A 1042, FileSystem-2A 1040 may be, e.g., an instance of the NTFS file system used by the WINDOWS operating system, of the UFS Unix file system, or the like. The term “file system” may also be used herein to refer to an instance of a type of file system, e.g., a particular structure of folders and files with particular names and content.

In one example, referring to FIG. 3 and FIG. 4 , an FS1 hierarchy rooted at File Server FS1 904 may be located on (e.g., associated with) FileServer-VM-1 1020 and stored in file system instance FileSystem-1A 1042. That is, the file system instance FileSystem-1A 1042 may store the names of the shares and storage items (such as folders and files), as well as the contents of the storage items, shown in the hierarchy at and below File Server FS1 904. A portion of the FS1 hierarchy shown in FIG. 3 , such the portion rooted at Folder-2 918, may be located on and/or associated with FileServer-VM-2 1022 on Host-2 1006 instead of FileServer-VM-1 1020, in which case the file system instance FileSystem-1B 1044 may store the portion of the FS1 hierarchy rooted at Folder-2 918, including Folder-3 912, Folder-4 920 and File-3 924. Similarly, an FS2 hierarchy rooted at File Server FS2 906 in FIG. 3 may be located on FileServer-VM-1 1020 and stored in file system instance FileSystem-2A 1040. The FS2 hierarchy may be split into multiple portions (not shown), such that one portion is located on FileServer-VM-1 1020 on Host-1 1004, and another portion is located on FileServer-VM-2 1022 on Host-2 1006 and stored in file system instance FileSystem-2B 1046.

In particular embodiments, FileServer-VM-1 (abbreviated FSVM-1) 1020 on Host-1 1004 is a leader for a portion of file server instance FS1 and a portion of FS2, and is a backup for another portion of FS1 and another portion of FS2. The portion of FS1 for which FileServer-VM-1 1020 is a leader corresponds to a storage pool labeled FS1-Pool-1 1048. FileServer-VM-1 is also a leader for FS2-Pool-2 1050, and is a backup (e.g., is prepared to become a leader upon request, such as in response to a failure of another FSVM) for FS1-Pool-3 1052 and FS2-Pool-4 1054 on Host-2 1006. In particular embodiments, FileServer-VM-2 (abbreviated FSVM-2) 1022 is a leader for a portion of file server instance FS1 and a portion of FS2, and is a backup for another portion of FS1 and another portion of FS2. The portion of FS1 for which FSVM-2 1022 is a leader corresponds to a storage pool labeled FS1-Pool-3 1052. FSVM-2 1022 is also a leader for FS2-Pool-4 1054, and is a backup for FS1-Pool-1 1048 and FS2-Pool-2 1050 on Host-1 1004.

In particular embodiments, the file server instances FS1, FS2 provided by the FSVMs 1020 and 1022 may be accessed by user VMs 1008, 1010, 1012 and 1014 via a network file system protocol such as SMB, CIFS, NFS, or the like. Each FSVM 1020 and 1022 may provide what appears to client applications on user VMs 1008, 1010, 1012 and 1014 to be a single file system instance, e.g., a single namespace of shares, files and folders, for each file server instance. However, the shares, files, and folders in a file server instance such as FS1 may actually be distributed across multiple FSVMs 1020 and 1022. For example, different folders in the same file server instance may be associated with different corresponding FSVMs 1020 and 1022 and CVMs 1024 and 1026 on different host machines 1004 and 1006. In other example, all FSVMs may be associated with the entire storage pool in some examples.

The example file server instance FS1 904 shown in FIG. 3 has two shares, Share-1 908 and Share-2 910. Share-1 908 may be located on FSVM-1 1020, CVM-1 1024, and local storage 1028. Network file system protocol requests from user VMs to read or write data on file server instance FS1 904 and any share, folder, or file in the instance may be sent to FSVM-1 1020. FSVM-1 1020 (or another component, such as a hypervisor in some examples) may determine whether the requested data, e.g., the share, folder, file, or a portion thereof, referenced in the request, is located on FSVM-1, and FSVM-1 is a leader for the requested data. If not, FSVM-1 may respond to the requesting User-VM with an indication that the requested data is not covered by (e.g., is not located on or served by) FSVM-1. Otherwise, the requested data is covered by (e.g., is located on or served by) FSVM-1, so FSVM-1 may send iSCSI protocol requests to a CVM that is associated with the requested data. Note that the CVM associated with the requested data may be the CVM-1 1024 on the same host machine 702 as the FSVM-1, or a different CVM on a different host machine 1006, depending on the configuration of the VFS. In this example, the requested Share-1 is located on FSVM-1, so FSVM-1 processes the request. To provide for path availability, multipath I/O (MPIO) may be used for communication with the FSVM, e.g., for communication between FSVM-1 and CVM-1. The active path may be set to the CVM that is local to the FSVM (e.g., on the same host machine) by default. The active path may be set to a remote CVM instead of the local CVM, e.g., when a failover occurs.

Continuing with the data request example, the associated CVM is CVM 1024, which may in turn access the storage device associated with the requested data as specified in the request, e.g., to write specified data to the storage device or read requested data from a specified location on the storage device. In this example, the associated storage device is in local storage 1028, and may be an HDD or SSD. CVM-1 1024 may access the HDD or SSD via an appropriate protocol, e.g., iSCSI, SCSI, SATA, or the like. CVM 110 a may send the results of accessing local storage 1028, e.g., data that has been read, or the status of a data write operation, to CVM 1024 via, e.g., SATA, which may in turn send the results to FSVM-1 1020 via, e.g., iSCSI. FSVM-1 1020 may then send the results to user VM via SMB through the Hypervisor 1016.

Share-2 910 may be located on FSVM-2 1022, on Host-2. Network file service protocol requests from user VMs to read or write data on Share-2 may be directed to FSVM-2 1022 on Host-2 by other FSVMs. Alternatively, user VMs may send such requests directly to FSVM-2 1022 on Host-2, which may process the requests using CVM-2 1026 and local storage 1030 on Host-2 as described above for FSVM-1 1020 on Host-1.

A file server instance such as FS1 904 in FIG. 3 may appear as a single file system instance (e.g., a single namespace of folders and files that are accessible by their names or pathnames without regard for their physical locations), even though portions of the file system are stored on different host machines. Since each FSVM may provide a portion of a file server instance, each FSVM may have one or more “local” file systems that provide the portion of the file server instance (e.g., the portion of the namespace of files and folders) associated with the FSVM.

FIG. 5 illustrates example interactions between a client 1104 and host machines 1106 and 1108 on which different portions of a VFS instance are stored according to particular embodiments. A client 1104, e.g., an application program executing in one of the user VMs and on the host machines of a virtualized file server described herein requests access to a folder \\FS1.domain.name\Share-1\Folder-3. The request may be in response to an attempt to map \\FS1.domain.name\Share-1 to a network drive in the operating system executing in the user VM followed by an attempt to access the contents of Share-1 or to access the contents of Folder-3, such as listing the files in Folder-3.

FIG. 5 shows interactions that occur between the client 1104, FSVMs 1110 and 1112 on host machines 1106 and 1108, and a name server 1102 when a storage item is mapped or otherwise accessed. The name server 1102 may be provided by a server computer system, such as one or more of the host machines 1106, 1108 or a server computer system separate from the host machines 1106, 1108. In one example, the name server 1102 may be provided by an ACTIVE DIRECTORY service executing on one or more computer systems and accessible via the network. The interactions are shown as arrows that represent communications, e.g., messages sent via the network. Note that the client 1104 may be executing in a user VM, which may be co-located with one of the FSVMs 1110 and 1112. In such a co-located case, the arrows between the client 1104 and the host machine on which the FSVM is located may represent communication within the host machine, and such intra-host machine communication may be performed using a mechanism different from communication over the network, e.g., shared memory or inter process communication.

In particular embodiments, when the client 1104 requests access to Folder-3, a VFS client component executing in the user VM may use a distributed file system protocol such as MICROSOFT DFS, or the like, to send the storage access request to one or more of the FSVMs. To access the requested file or folder, the client determines the location of the requested file or folder, e.g., the identity and/or network address of the FSVM on which the file or folder is located. The client may query a domain cache of FSVM network addresses that the client has previously identified (e.g., looked up). If the domain cache contains the network address of an FSVM associated with the requested folder name \\FS1.domain.name\Share-1\Folder-3, then the client retrieves the associated network address from the domain cache and sends the access request to the network address, starting at step 1164 in some examples.

In particular embodiments, at step 1164, the client may send a request for a list of addresses of FSVMs to a name server 1102. The name server 1102 may be, e.g., a DNS server or other type of server, such as a MICROSOFT domain controller (not shown), that has a database of FSVM addresses. At step 1148, the name server 1102 may send a reply that contains a list of FSVM network addresses, e.g., ip-addr1, ip-addr2, and ip-addr3, which correspond to the FSVMs in this example. At step 1166, the client 1104 may send an access request to one of the network addresses, e.g., the first network address in the list (ip-addr1 in this example), requesting the contents of Folder-3 of Share-1. By selecting the first network address in the list, the particular FSVM to which the access request is sent may be varied, e.g., in a round-robin manner by enabling round-robin DNS (or the like) on the name server 1102. The access request may be, e.g., an SMB connect request, an NFS open request, and/or appropriate request(s) to traverse the hierarchy of Share-1 to reach the desired folder or file, e.g., Folder-3 in this example.

At step 1168, FileServer-VM-1 1110 may process the request received at step 1166 by searching a mapping or lookup table, such as a sharding map 1122, for the desired folder or file. The map 1122 maps stored objects, such as shares, folders, or files, to their corresponding locations, e.g., the names or addresses of FSVMs. The map 1122 may have the same contents on each host machine, with the contents on different host machines being synchronized using a distributed data store as described below. For example, the map 1122 may contain entries that map Share-1 and Folder-1 to the File Server FSVM-1 1110, and Folder-3 to the File Server FSVM-3 1112. An example map is shown in Table 1 below. While the example of FIG. 5 is depicted and described with respect to the FSVM processing the request, in some examples, one or more other components of a virtualized system may additionally or instead process the request (e.g., a CVM and/or a hypervisor).


	Stored Object	Location

	Folder-1	FSVM-1
	Folder-2	FSVM-1
	File-1	FSVM-1
	Folder-3	FSVM-3
	File-2	FSVM-3

In particular embodiments, the map 1122 or 1124 may be accessible on each of the host machines. The maps may be copies of a distributed data structure that are maintained and accessed at each FSVM using a distributed data access coordinator 1126 and 1130. The distributed data access coordinator 1126 and 1130 may be implemented based on distributed locks or other storage item access operations. Alternatively, the distributed data access coordinator 1126 and 1130 may be implemented by maintaining a master copy of the maps 1122 and 1124 at a leader node such as the host machine 1108, and using distributed locks to access the master copy from each FSVM 1110 and 1112. The distributed data access coordinator 1126 and 1130 may be implemented using distributed locking, leader election, or related features provided by a centralized coordination service for maintaining configuration information, naming, providing distributed synchronization, and/or providing group services (e.g., APACHE ZOOKEEPER or other distributed coordination software). Since the map 1122 indicates that Folder-3 is located at FSVM-3 1112 on Host-3 1108, the lookup operation at step 1168 determines that Folder-3 is not located at FSVM-1 on Host-1 1106. Thus, at step 1162 the FSVM-1 1110 (or other component of the virtualized system) sends a response, e.g., a “Not Covered” DFS response, to the client 1104 indicating that the requested folder is not located at FSVM-1. At step 1160, the client 1104 sends a request to FSVM-1 for a referral to the FSVM on which Folder-3 is located. FSVM-1 uses the map 1122 to determine that Folder-3 is located at FSVM-3 on Host-3 1108, and at step 1158 returns a response, e.g., a “Redirect” DFS response, redirecting the client 1104 to FSVM-3. The client 1104 may then determine the network address for FSVM-3, which is ip-addr3 (e.g., a host name “ip-addr3.domain.name” or an IP address, 10.1.1.3). The client 1104 may determine the network address for FSVM-3 by searching a cache stored in memory of the client 1104, which may contain a mapping from FSVM-3 to ip-addr3 cached in a previous operation. If the cache does not contain a network address for FSVM-3, then at step 1150 the client 1104 may send a request to the name server 1102 to resolve the name FSVM-3. The name server may respond with the resolved address, ip-addr3, at step 1152. The client 1104 may then store the association between FSVM-3 and ip-addr3 in the client's cache.

In particular embodiments, failure of FSVMs may be detected using the centralized coordination service. For example, using the centralized coordination service, each FSVM may create a lock on the host machine on which the FSVM is located using ephemeral nodes of the centralized coordination service (which are different from host machines but may correspond to host machines). Other FSVMs may volunteer for leadership of resources of remote FSVMs on other host machines, e.g., by requesting a lock on the other host machines. The locks requested by the other nodes are not granted unless communication to the leader host machine is lost, in which case the centralized coordination service deletes the ephemeral node and grants the lock to one of the volunteer host machines and, which becomes the new leader. For example, the volunteer host machines may be ordered by the time at which the centralized coordination service received their requests, and the lock may be granted to the first host machine on the ordered list. The first host machine on the list may thus be selected as the new leader. The FSVM on the new leader has ownership of the resources that were associated with the failed leader FSVM until the failed leader FSVM is restored, at which point the restored FSVM may reclaim the local resources of the host machine on which it is located.

At step 1154, the client 1104 may send an access request to FSVM-3 1112 at ip-addr3 on Host-3 1108 requesting the contents of Folder-3 of Share-1. At step 1170, FSVM-3 1112 queries FSVM-3's copy of the map 1124 using FSVM-3's instance of the distributed data access coordinator 1130. The map 1124 indicates that Folder-3 is located on FSVM-3, so at step 1172 FSVM-3 accesses the file system 1132 to retrieve information about Folder-3 1144 and its contents (e.g., a list of files in the folder, which includes File-2 1146) that are stored on the local storage 1120. FSVM-3 may access local storage 1120 via CVM-3 1116, which provides access to local storage 1120 via a volume group 1136 that contains one or more volumes stored on one or more storage devices in local storage 1120. At step 1156, FSVM-3 may then send the information about Folder-3 and its contents to the client 1104. Optionally, FSVM-3 may retrieve the contents of File-2 and send them to the client 1104, or the client 1104 may send a subsequent request to retrieve File-2 as needed.

Examples described herein include file server managers which may manage multiple virtualized file servers (e.g., multiple file systems). The multiple virtualized file servers managed by a file server manager may be hosted by multiple computing node clusters (e.g., in multiple virtualization environments). The file server manager may be in communication with each of the multiple virtualized file servers. In this manner, a file server manager may provide a single pane of glass management interface to help manage and orchestrate file platform and service specific operations from a single location (e.g., a single logon and/or single user interface). File server managers may accordingly implement policies and conduct other operations based on data from multiple virtualized file servers in communication with the file server manager.

In various examples described herein, file server managers may be used to configure and manage share based replication of one or more virtualized file servers. For example, the file server manager may be configurable to select shares from a source virtualized file server to be replicated to a destination virtualized file server. The file server manager may further include replication policies controlling various aspects of share based replication. In some examples, file server managers may implement active-active share based replication, such that a backed-up virtualized file server (e.g., a destination virtualized file server) may be accessed and utilized relatively quickly upon failure of a primary virtualized file server (e.g., a source virtualized file server). The file server manager may also, in some embodiments, implement fail-back to a source virtualized file server after a fail-over to a destination file server. File server managers may accordingly implement share based replication and/or backup of a virtualized file server.

Various examples of share based replication and disaster recovery may provide a short recovery time, allowing for continuous availability of data after fail over to a recovery site. For example, configuration of active directory and domain name system entries may facilitate client access redirection from a failed file server to a backup file server after fail over. In the event of a planned or unplanned loss of service at a file server, corresponding shares at a backup or standby file server may be activated, and client connection requests for the file server may be redirected to the backup file server by updating address information for the file server at an active directory server or a domain name server. Accordingly, failover may occur quickly and with few noticeable changes to clients connecting to the backup file server.

FIG. 6 is a schematic illustration of a system arranged in accordance with examples described herein. The system of FIG. 6 includes file server manager 102. The file server manager 102 may provide user interface 104. The file server manager 102 may be in communication with memory and/or storage for metadata 136 and registration information 144. The system of FIG. 6 further includes virtualized file server 106, virtualized file server 114, and virtualized file server 122. The virtualized file server 106, 114, and/or 122 may be implemented by any virtualized file servers described herein, including those described with respect to FIGS. 1-5 . The virtualized file server 106, virtualized file server 114, and virtualized file server 122 may each be in communication with the file server manager 102 (e.g., over one or more networks). Each of the virtualized file server 106, virtualized file server 114, and virtualized file server 122 may be hosted in a same and/or different virtualization environment. Each of the virtualized file server 106, virtualized file server 114, and virtualized file server 122 may include a cluster of computing nodes hosting a cluster of file server virtual machines (FSVM). For example, the virtualized file server 106 includes FSVM 108, FSVM 110, and FSVM 112. The virtualized file server 114 includes FSVM 116, FSVM 118, and FSVM 120. The virtualized file server 122 includes FS VM 124, FSVM 126, and FSVM 128. Each of the virtualized file server 106, virtualized file server 114, and virtualized file server 122 may include virtualized storage. For example, the virtualized file server 106 may include virtualized storage 130, the virtualized file server 114 may include virtualized storage 132, and the virtualized file server 122 may include virtualized storage 134. Moreover, each of the virtualized file server 106, virtualized file server 114, and virtualized file server 122 may include storage and/or memory for storing metadata. The virtualized file server 106 may store metadata 138. The virtualized file server 114 may store metadata 140. The virtualized file server 122 may store metadata 142.

The components shown in FIG. 6 are exemplary only. Additional, fewer, and/or different components may be used in other examples. For example, three virtualized file servers are depicted in FIG. 6 , however any number may be used and may be in communication with the file server manager 102.

Examples of systems described herein may accordingly include one or more virtualized file servers, such as virtualized file server 106, virtualized file server 114, and virtualized file server 122 in FIG. 6 . A virtualized file server may represent a logical entity in the system. Virtualized file servers described herein may be hosted in generally any virtualization environment (e.g., on generally any virtualization platform). The virtualization environment and/or platform generally refers to the storage resources that have been virtualized by the virtualized file server and the compute resources (e.g., computing nodes with processor(s)) used to manage the virtualized storage. For example, the virtualized file server 106 may be hosted on a different virtualization environment than the virtualized file server 114 and/or than the virtualized file server 122. Nonetheless, in some examples one or more virtualized file servers in communication with a file server manager may be hosted in a same virtualization environment. Examples of virtualization environments include, for example, on premises installations of one or more computing nodes and storage devices. Examples of virtualization environment include one or more cloud computing systems (e.g., Amazon Web Services, MICROSOFT AZURE). Although not shown explicitly in FIG. 6 , virtualization environments and/or virtualized file servers may include additional components including, but not limited to, one or more hypervisors, storage controllers, operating systems, and/or container orchestrators (e.g., Kubernetes). The multiple virtualized file servers in communication with a file server manager described herein may in some examples be located in different geographic locations (e.g., different buildings, states, cities, or countries).

A virtualized file server may include a cluster of virtual machines and/or other virtualized entities (e.g., containers), which may be referred to as file server virtual machines (FSVMs). In some examples, each of the file server virtual machines of a cluster may be implemented on different computing nodes forming a computing node cluster. For example, the FSVM 108, FSVM 110, and FSVM 112 of virtualized file server 106 may each be implemented on separate computing nodes of a computing node cluster used by the virtualized file server 106. Similarly, the FSVM 116, FSVM 118, and FSVM 120 may each be implemented on separate computing nodes of a computing node cluster used by the virtualized file server 114. Similarly, the FSVM 124, FSVM 126, and FSVM 128 may each be implemented on separate computing nodes of a computing nodes cluster. In some examples, a cluster of FSVMs may be implemented on a cloud computing system.

The FSVMs may operate to provide a file system on the storage resources of the virtualized file server. The file system may have a single namespace and may store data in accordance with filenames and/or directories. The FSVMs may accordingly support one or more file system protocols, such as NFS and/or SMB. A virtualized file server (such as virtualized file server 106, virtualized file server 114, and/or virtualized file server 122) may translate file system protocol requests for one or more files and/or directories (e.g., a file path) into one or more storage requests to access the data corresponding to the file, directory, and/or file path. Any of a variety of components of the virtualized file server may be used to perform the translation (e.g., one or more FSVMs, one or more hypervisors, and/or one or more storage controllers). The translation may be performed using a map (e.g., a shard map) relating the location of the data to the file name, share, directory, and/or file path.

Virtualized file servers described herein may include virtualized storage. For example, the virtualized file server 106 may include virtualized storage 130. The virtualized file server 114 may include virtualized storage 132. The virtualized file server 122 may include virtualized storage 134. The virtualized storage may generally include any number or kind of storage devices—for example, network attached storage, local storage of one or more computing nodes forming the virtualized file server, and/or cloud storage. Storage devices may be implemented using, for example one or more memories, hard disk drives, solid state drives. The virtualized storage for a particular virtualized file server may be referred to as a storage pool. The virtualized storage may store one or more shares. Generally, the virtualized storage may refer to a storage pool which may include any of a variety of storage devices. In some examples, the virtualized file server(s) may be implemented in a hyperconverged architecture. For example, the storage pool may include local storage devices of the computing nodes used to host the virtualized file server. For example, virtualized storage 130 may include a storage pool. One or more shares of a file system provided by the virtualized file server 106 may be distributed across storage device of the storage pool, including local storage devices of one or more computing nodes on which the FSVM 108, FSVM 110, and/or FSVM 112 reside. In some examples, each file server virtual machine (FSVM) may manage (e.g., host) a corresponding share or portion of a share. A map may store associations between shares and files, directories, and/or file paths.

Virtualized file servers described herein may include metadata. For example, virtualized file server 106 may include metadata 138. The virtualized file server 114 may include metadata 140. The virtualized file server 122 may include metadata 142. The metadata may be stored, for example, in the virtualized storage and/or other storage location accessible to the virtualized file server. The metadata may in some examples be distributed across the storage pool of a virtualized file server. In some examples, the metadata may be stored in a database accessible to and/or hosted by the virtualized file server. Metadata stored by a virtualized file server may include, for example, authentication information for the virtualized file server and/or virtual machines in the virtualized file server, authorization information for the virtualized file server and/or virtual machines in the virtualized file server, configuration information for the virtualized file server and/or virtual machines in the virtualized file server, end point information (e.g., supported API calls and/or endpoints), a number of shares stored in the virtualized storage of the virtualized file server, a protocol supported by each share and/or FSVM (e.g., NFS and/or SMB), identities of the shares stored in the virtualized storage of the virtualized file server, a number of file server virtual machines (FSVMs) present in the virtualized file server, a number of files and/or directories hosted by the virtualized file server, compute resources available and/or used at the virtualized file server, storage resources available and/or used at the virtualized file server, or other metadata regarding the virtualized file server. The metadata may be maintained by the virtualized file server, for example, the metadata may be updated as the number of shares, FSVMs, storage resources and/or compute resources change.

Examples described herein may include a file server manager, such as file server manager 102 of FIG. 6 . A file server manager may be in communication with multiple virtualized file servers. For example, the file server manager 102 may be in communication with virtualized file server 106, virtualized file server 114, and virtualized file server 122. In this manner, the file server manager 102 may allow for access to, maintenance of, and/or management of multiple virtualized file servers (e.g., multiple file systems). An enterprise may have many virtualized file servers that are desired to be managed—for example, different geographic locations of the enterprise may maintain separate file systems and/or implement different privacy or other data policies. In some examples, different departments or entities within an organization may maintain respective virtualized file servers. An administrator or other entity associated with the enterprise, such as an IT manager, may advantageously view, access, and/or manage multiple virtualized file servers using the file server manager (e.g., file server manager 102). The file server manager may communicate with each virtualized file server using any of a variety of connections, including one or more networks. In some examples, a same network may be used to communicate between the file server manager and multiple virtualized file servers. In some examples, multiple networks may be used.

File server managers, such as file server manager 102 of FIG. 6 may be implemented using one or more computing devices. In some example, an administrative computing system may be used. The administrative computing system may include, for example, one or more processors and non-transitory computer readable media encoded with instructions for performing the file server manager operations described herein. In some examples, the file server manager may be implemented using a computing device different than the computing devices (e.g., computing nodes) used to implement the virtualized file server(s) with which the file server manager is in communication. In some examples, the file server manager may be hosted on one of the computing nodes forming a part of a virtualized file server in communication with the file server manager. File server managers, such as file server manager 102, may be hosted on premises systems in some examples, and/or on cloud computing systems in some examples.

Examples of file server managers described herein may provide one or more user interfaces, such as user interface 104 of FIG. 6 . The user interface may allow a user (e.g., a human administrator and/or another computer process) to view information regarding multiple virtualized file servers, to communicate with multiple virtualized file servers, to manage multiple virtualized file servers, and generally to offer a single pane of glass interface to the multiple virtualized file servers in communication with the file server manager. The user interface may be implemented, for example, using one or more display(s) and one or more input and/or output device(s) (e.g., mouse, keyboard, touchscreen, etc.). In some examples, user interface 104 of file server manager 102 may be used to depict one or more of the virtualized file server 106, virtualized file server 114, and/or virtualized file server 122. For example, the identity and number of shares used by the virtualized file servers may be displayed. In some examples, the number and identity of computing nodes and/or FSVMs in each of the virtualized file servers may be displayed. Other attributes of the virtualized file servers may additionally or instead be displayed using a user interface of a file server manager. The data used in the display may wholly and/or partially be obtained from the registration information and/or metadata synchronized with one or more of the virtualized file servers.

Examples of file server managers described herein may store registration information, such as registration information 144 of FIG. 6 . The registration information 144 may include information regarding each virtualized file server in communication with the file server manager. The registration information may include information used to manage, communicate with, and/or otherwise interact with the virtualized file server. Examples of registration information include a name of the virtualized file server, an identification of the virtualization environment hosting the virtualized file server, credentials for one or more FSVMs in the virtualized file server, IP addresses or other addresses for the virtualized file server, FSVMs in the virtualized file server, or other components of the virtualized file server. During setup of a system including a file server manager, the virtualized file servers may be registered with the file server manager, and may provide registration information to the file server manager. The registration information may be stored by the file server manager, such as in registration information 144, which may be a database in some examples. The registration information may be stored on a memory and/or other storage device accessible to the file server manager.

Examples of file server managers described herein may include metadata, such as metadata 136. The metadata may be synchronized to the metadata of multiple virtualized file servers in communication with the file server manager. For example, the metadata 136 may be synchronized with metadata 138, metadata 140, and metadata 142. For example, the metadata 136 at any given time may include metadata 138, metadata 140, and metadata 142. Synchronization may be maintained over time—the metadata of multiple virtualized file servers may periodically (e.g., at regular and/or irregular intervals) synchronize with the metadata store of the file server manager. In this manner, the file server manager 102 may maintain an updated storage of metadata associated with each of virtualized file server 106, virtualized file server 114, and virtualized file server 122. The metadata may be accessed by the file server manager and used to manage, communicate with, and/or otherwise interact with the virtualized file servers.

While the metadata 136 and registration information 144 are depicted separately in FIG. 6 , they may be wholly and/or partially stored on a same storage device in some examples. The metadata 136 may be stored, for example, in a database. The registration information 144 may be stored, for example, in a database. Any of a variety of database synchronization techniques may be used to synchronize the metadata of the file server manager with the metadata of multiple virtualized file servers.

During operation, a file server manager described herein may register, such as by receiving a registration for, one or more virtualized file servers. For example, a virtualized file server (e.g., using an FS VM, a hypervisor, and/or another component of the virtualized file server), may transmit a registration (e.g., registration information) to the file server manager. In some examples, the file server manager may request such a registration by transmitting a request to register to the virtualized file server. In some examples, such as when the file server manager is hosted on a cluster and/or within a same system as the virtualized file server, an automatic registration may occur. For example, the registration process may include determining (e.g., from one or more IP addresses used), that a virtualized file server is hosted on a same domain as a file server manager. In other examples, virtualized file servers which are not hosted on a same domain as a file server manager may nonetheless register with the file server manager. In the example of FIG. 6 , the file server manager 102 may request registration from virtualized file server 106, virtualized file server 114, and virtualized file server 122. For example, a system administrator may enter an IP address, name, or other identifier to request a registration from virtualized file server 106, virtualized file server 114, and/or virtualized file server 122. In some examples, a system administrator or other user or component may transmit a registration from virtualized file server 106, virtualized file server 114, and/or virtualized file server 122, which registration may or may not be responsive to a request. In some examples, the operating system of one or more computing nodes of the virtualized file server hosting an FSVM may provide a registration request to the file server manager. The registration may include registration information which file server manager 102 may store in registration information 144.

The file server manager may synchronize metadata of registered file servers such that up to date metadata of the registered file server may be accessible to the file server manager. For example, the metadata 136 may synchronize with metadata 138, metadata 140, and metadata 142 of FIG. 6 . Any and/or all types of metadata of the virtualized file server may be synched with a file server manager. For example, a number and identity of shares of each virtualized file server may be synchronized with the file server manager. In some examples, compute and/or storage resource usage may additionally or instead be synchronized between a virtualized file server and the file server manager. Sharding or other maps and/or portions thereof may be synchronized between a virtualized file server and the file server manager. Other metadata may be synchronized additionally or instead.

During operation, file server managers described herein, such as file server manager 102 of FIG. 6 may receive a management request for a particular virtualized file server. The management request may be received, for example by a client which may be hosted on a client system, on a system also hosting the file server manager, and/or on a system hosting all or a portion of one of the virtualized file servers in communication with the file server manager. In some examples, the management request may be implemented using an API call. In this manner, a file server manager may provide an API endpoint to receive API calls for one or more virtualized file servers. Examples of management requests include requests for accessing, managing, and/or maintaining the virtualized file server. For example, a management request may be a request to add and/or subtract one or more FSVMs, add and/or subtract one or more shares in the storage, and/or upgrade one or more FSVMs.

The file server manager may format the received management request for the virtualization environment (e.g., virtualization platform) used to host the requested virtualized file server. For example, the file server manager may access the registration information 144 to identify a virtualization environment for a virtualized file server identified in the management request. The management request may then be formatted in a manner used by the virtualized environment. In some examples, the formatted management request may be implemented as an API call, with the API call specific to the virtualization environment of the target virtualized file server. In this manner, clients or other users providing management requests to the file server manager may not require knowledge of the virtualized environment hosting the virtualized file server. The file server manager may format the request in the manner used to communicate with the appropriate virtualization environment. This may provide flexibility in system design and usage, as multiple virtualization environments may be used, and virtualized file servers may in some examples be relocated from one virtualized environment to another without a need to update management requests being provided to the file server manager. Instead, an updated identification of the virtualized environment may be stored in registration information 144 and/or metadata 136.

During operation, the file server manager may utilize information from the registration to implement the management request. For example, access credentials provided during registration may be used to access one or more FSVMs and/or other components of the virtualized file server (e.g., hypervisor, other virtual machine(s) and/or container(s)) and implement the management request. In some examples, the management request may be provided to a particular FSVM. In some examples, the management request may be provided to an FSVM of the virtualized file server that is designated as a leader, and the leader FSVM may communicate the management request to an appropriate FSVM of the virtualized file server.

In some examples, file server managers described herein, such as file server manager 102 of FIG. 6 , may be used to implement one or more cross-file server policies. A cross-file server policy may generally refer to a policy that accesses and/or utilizes more than one file server in implementing the policy. For example, one virtualized file server may be used (e.g., designated) as a destination file server and another virtualized file server may be used (e.g., designated) as a source file server. For example, the file server manager 102 may designate virtualized file server 106 as a source file server and virtualized file server 114 as a destination file server. The file server manager 102 may then utilize virtualized file server 106 to replicate, backup, provide redundancy for, or otherwise receive data from virtualized file server 106. For example, the file server manager 102 may implement a replication policy from virtualized file server 106 to virtualized file server 114. Without the presence of file server manager 102 in some examples, the virtualized file server 106 may have been used to implement a replication policy to virtualized file server 114 directly. However, utilizing file server manager 102 provides for central cross-server management and avoids a need for individual file servers to communicate with one another directly.

Examples of file server managers and file server replication, including share based replication, which may be used are also described in U.S. application Ser. No. 17/581,562, filed Jan. 21, 2022 and entitled “Share-based file server replication for disaster recovery,” which application is hereby incorporated by reference in its entirety for any purpose.

FIG. 7 is a flowchart depicting a method of processing requests received at a file server manager arranged in accordance with examples described herein. The flowchart 200 depicts management requests that may be provided to a file server manager as one or more API calls, such as API call 202. The flowchart 200 includes evaluating the type of management request—is it files service specific in block 204, is it files platform specific in block 206, is it a UI request in block 208. Responsive to a determination the management request is files service specific in block 204, the flowchart 200 indicates the API may be redirected to a virtualized file server in block 210, and may be provided, for example, to virtualized file server 212. Responsive to a determination the management request is files platform specific in block 206, the request may be directed to a gateway or backend in block 214, such as gateway 216. Responsive to a determination the management request is a UI request, it may be redirected to a file server in block 218, such as file server 220, which may be a virtualized file server. The blocks and components of flowchart 200 are exemplary, and the blocks and component may occur in different orders in some examples, and additional and/or fewer blocks or components may be used in some examples.

The method depicted by flowchart 200 may be implemented by file server managers described herein, such as by file server manager 102 of FIG. 6 .

In block 202, an API call 202 may be received, which may also be referred to as a management request. The API call 202 may be implemented, for example, using a REST API. The API call 202 may be received from an administrator (e.g., using an interface to a file server manager, such as user interface 104 of FIG. 6 ). The API call 202 may be received from a computing system (e.g., a client computing system) in communication with a file server manager described herein. In some examples the request may come from an automation script that may be executing on, for example a computing system in communication with the file server manager and/or on the file server manager itself. In some examples, the API call may be received from (e.g., may be sent by) a virtualized file server in communication with the file server manager, such as virtualized file servers 106, virtualized file server 114, and/or virtualized file server 122 of FIG. 6 . The API call may be received from a virtual machine and/or container. For example, the API call may be received from a user virtual machine and/or container which may be hosted on a same computing node of as one of the FSVMs of the virtualized file server. The API call may be used to implement a management request as described herein. The API call may not be specific to the type of platform (e.g., virtualization platform) hosting a virtualized file server. In this manner, the API call may be agnostic to platform type. The file server manager may accordingly provide an API endpoint for management requests directed to one or more virtualized file servers.

The file server manager may evaluate the management request received, e.g., API call 202. For example, the file server manager 102 may receive API call 202 and may evaluate it to determine how to direct the API call. The management request may be evaluated to determine its intended destination. For example, the file server manager 102 may evaluate a management request to determine if it is files service specific (e.g., in block 204), if it is directed toward a files platform (e.g., block 206), and/or if it is a UI request (e.g., block 208). The evaluation may be based, for example, on identifying that the content of the request pertains to files services, files platform, and/or UI. The evaluation may be based, for example, on identifying a destination of the request.

If the management request (e.g., API call 202) is determined to be a files service specific request in block 204, the request may be redirected to the appropriate virtualized file server in block 210. Examples of files service specific requests include requests to create a share, create or revise one or more user quotas for the virtualized file server, monitor a number of users connected to a virtualized file server, or blocking one or more particular users of the virtualized file server. Files service specific requests may not need to be translated for the particular virtualization platform of the virtualized file server, because in some examples they may requests which are received and/or processed by one or more file server virtual machines (FSVMs) or another component of the virtualized file server (e.g., hypervisor, daemon, or other service). In redirecting to a virtualized file server, the file server manager may in some examples format the request in a manner suitable for the virtualized file server, such as the virtualized file server 212. In some examples, the file server manager may format the request in a manner suitable for a particular version of file server virtual machine operating in the requested virtualized file server. In some examples, the file server manager may receive a request for a virtualized file server that the particular version of file server virtual machine used may not support. The file server manager may identify the version of file server virtual machine (e.g., by accessing metadata and/or registration information) and may replace the unsupported request with a supported request able to be received and processed by the version of file server virtual machine in operation.

If the management request (e.g., API call 202) is determined to be a files platform request (e.g., create one or more FSVMs, scale-in the virtualized file server, scale-out the virtualized file server, add storage to the virtualized file server), then management request may be redirected to a gateway or backend for the appropriate virtualized file server in block 214, such as gateway 216. In redirecting the request, the file server manager may format the request for the particular virtualization platform (e.g., virtualization environment) on which the virtualized file server is hosted. For example, the management request may be formatted for the compute and storage resources used in a particular environment such as a NUTANIX platform, an AMAZON WEB SERVICES platform, a MICROSOFT AZURE platform, etc. The file server manager may access a database or other stored location to determine the platform hosting the requested virtualized file server (e.g., registration information 144 in FIG. 6 ). Based on the identity of the platform, the management request may be formatted for the platform (e.g., by utilizing platform-specific API calls in some examples). In this manner, an administrator or other user may manipulate a virtualized file server—e.g., to expand the virtualized file server—without requiring knowledge on behalf of the administrator of what platform is hosting the virtualized file server.

If the management request (e.g., API call 202) is determined to be a UI request, it may be redirected to a file server in block 218, such as file server 220, which may be a virtualized file server. UI requests may include, for example, requests to view the current compute resource usage, storage resources usage, number of shares, identity of shares, and/or files or directories hosted by a particular virtualized file server. In redirecting the request to a file server in block 218, the file server manager may format the request in a manner particular to the file server and/or the UI of the file server.

Accordingly, using methods such as depicted in flowchart 200 of FIG. 7 , file server managers described herein may receive and redirect management requests, such as API calls. The API calls may be selected and/or formatted in a manner particular to a virtualized file server and/or a virtualization environment.

FIG. 8 depicts a block diagram of components of a computing system in accordance with examples described herein. It should be appreciated that FIG. 8 provides only an illustration of one implementation and does not imply any limitations with regard to the environments in which different embodiments may be implemented. Many modifications to the depicted environment may be made. The computing system may be used to implement and/or may be implemented by any file server manager, admin system, and/or host machine described herein. The components shown in FIG. 8 are exemplary only, and it is to be understood that additional, fewer, and/or different components may be used in other examples.

The computing node 1200 includes one or more communications fabric(s) 1202, which provide communications between one or more processor(s) 1204, memory 1206, local storage 1208, communications unit 1210, and/or I/O interface(s) 1212. The communications fabric(s) 1202 can be implemented with any architecture designed for passing data and/or control information between processors (such as microprocessors, communications and network processors, etc.), system memory, peripheral devices, and any other hardware components within a system. For example, the communications fabric(s) 1202 can be implemented with one or more buses.

The memory 1206 and the local storage 1208 may be computer-readable storage media. In the example of FIG. 12 , the memory 1206 includes random access memory RAM 1214 and cache 1216. In general, the memory 1206 can include any suitable volatile or non-volatile computer-readable storage media. In this embodiment, the local storage 1208 includes an SSD 1222 and an HDD 1224. The memory 1206 may include executable instructions for providing a file server manager 1226. In other examples, the memory 1206 may include executable instructions for providing other software components described herein. The instructions for providing a file server manager 1226 may be used to implement and/or implemented by file server managers described herein.

Various computer instructions, programs, files, images, etc. may be stored in local storage 1208 and/or memory 1206 for execution by one or more of the respective processor(s) 1204 via one or more memories of memory 1206. In some examples, local storage 1208 includes a magnetic HDD 1224. Alternatively, or in addition to a magnetic hard disk drive, local storage 1208 can include the SSD 1222, a semiconductor storage device, a read-only memory (ROM), an erasable programmable read-only memory (EPROM), a flash memory, or any other computer-readable storage media that is capable of storing program instructions or digital information.

The media used by local storage 1208 may also be removable. For example, a removable hard drive may be used for local storage 1208. Other examples include optical and magnetic disks, thumb drives, and smart cards that are inserted into a drive for transfer onto another computer-readable storage medium that is also part of local storage 1208.

Communications unit 1210, in some examples, provides for communications with other data processing systems or devices. For example, communications unit 1210 may include one or more network interface cards. Communications unit 1210 may provide communications through the use of either or both physical and wireless communications links.

I/O interface(s) 1212 may allow for input and output of data with other devices that may be connected to computing node 1200. For example, I/O interface(s) 1212 may provide a connection to external device(s) 1218 such as a keyboard, a keypad, a touch screen, and/or some other suitable input device. External device(s) 1218 can also include portable computer-readable storage media such as, for example, thumb drives, portable optical or magnetic disks, and memory cards. Software and data used to practice embodiments of the present invention can be stored on such portable computer-readable storage media and can be loaded onto and/or encoded in memory 1206 and/or local storage 1208 via I/O interface(s) 1212 in some examples. I/O interface(s) 1212 may connect to a display 1220. Display 1220 may provide a mechanism to display data to a user and may be, for example, a computer monitor.

In various examples described herein, an admin system may be utilized to implement replication of a file server. Replication and disaster recovery may facilitate share-level data replication and disaster recovery. In the event of a planned or unplanned loss of service, write access can be restored to protected shares by failing-over to a recovery site file server. Protection policies may indicate failover details, including the primary location, recovery location, and replication schedule. Rather than having a single protection policy for an entire file server, unique policies may be configured for different shares without tracking or without regard to where, physically, the shares are stored within the file system.

Data replication may be provided from a source file server to a remote file server, which may be used for failover in case of failure of the source file server. The admin system may be used to configure replication policies by, for example, selecting shares from the source file server to be replicated to the destination file server. Replication policies may further include, in various examples, selecting a replication schedule (e.g., replication frequency) for the selected shares. The source file server may be replicated by replicating each share independently based on the replication schedule. The data replication may be based on file system datastream send and receive technology. The first replication may be a full replication using a base snapshot. Subsequent replication may transfer only a data difference between the last snapshot and a new snapshot.

Replication described herein may include maintaining the standby or destination file server such that the destination file server accepts client connections and serves data over NFS and/or SMB protocols in read only. For example, the destination file server may be used to read data from the file system. However, before a failover or activation, the destination file server may not be used to write data to the file system. In case of a failure of the primary or source file server, or other failover trigger, failover may occur by updating settings of the destination file server to accept read and write requests, which may shorten recovery time when contrasted with a typical active-passive scenario. The replication methods described herein may provide failover and failback workflows to orchestrate recovery of the primary file server. In some examples, additional workflows may allow the destination file server to take over the identity of the primary file server.

The replication described herein may use a task based framework. A task framework may allow for tracking progress of work done (e.g., whether individual tasks have been started, completed, or exited with an error). Tasks may be used to handle user triggered operations that take a long time and are handled asynchronously. For example, a failover workflow may be a task. The replication described herein may use a job framework in addition to the task based framework. A job may be similar to a task, where a job represents a unit of system generated action. The job framework may allow for tracking progress of system generated periodic work. For example, replication may be a job.

FIG. 9 is a schematic illustration of a system arranged in accordance with examples described herein. The system shown in FIG. 9 may be used to perform disaster recovery for a virtualized file server. In particular, the system shown in FIG. 9 may be used to switch between an application level replication policy and a share level data protection policy. The switch may occur in some examples without a need to repeat a base level snapshot (e.g., an L0 snapshot) of the file server.

The system of FIG. 9 includes admin system 902 which may include file server manager 904. The admin system 902 may be in communication with one or both of host machine(s) 934 and/or host machine(s) 936. The admin system 902 may be in communication with one or both of primary file server 906 and/or secondary file server 908. The system of FIG. 9 includes a primary file server 906 which may be hosted by host machine(s) 934. The system of FIG. 9 further includes secondary file server 908 which may be hosted by host machine(s) 936. The host machine(s) 934 may further host application level replicator 910 and application level snapshot(s) 912. The host machine(s) 936 may further host application level replicator 924 and application level snapshot(s) 922. The primary file server 906 may manage access to storage items (e.g., shares) stored in storage pool 918. The secondary file server 908 may manage access to storage items (e.g., shares) stored in storage pool 932. The primary file server 906 may include one or more file server virtual machines, FSVM(s) 914. The primary file server 906 may include share level replicator 920 and share level snapshot(s) 916. The secondary file server 908 may include share level replicator 930 and share level snapshot(s) 928. The components shown in FIG. 9 are by way of example. Additional, fewer, and/or different components may be used in other examples.

The primary file server 906 and/or secondary file server 908 may be implemented using one or more virtualized file servers described herein, such as those described with reference to FIGS. 1-8 . For example, the primary file server 906 may be hosted on one or more host machine(s) 934. The primary file server 906 may include a plurality of virtualized computing instances, such as one or more virtual machines, containers, or combinations thereof. The virtualized computing instances may form a cluster of virtualized computing instances. Each of the virtualized computing instances may present a namespace of storage items for a file system. The storage items may be distributed in storage pool 918. For example, each host machine(s) 934 may host at least one file server virtual machine—e.g., at least one of FSVM(s) 914. Each of the FSVM(s) 914 may manage access requests for storage items in the storage pool 918 (e.g., files, folders, and/or shares), where the access requests are provided to the FSVM(s) 914 using a path name and/or in accordance with a file system protocol. The FSVM(s) 914, which may be implemented using virtual machine(s), container(s), daemons, or other virtualized computing instances, may each present a namespace of storage items in the storage pool 918 to one or more clients. The clients may include, for example, user VMs executing on one or more of the host machine(s) 934. The storage pool 918 may include network storage, cloud storage, and local storage devices of one or more of the host machine(s) 934. In this manner, the primary file server 906 may be implemented in a hyperconverged architecture.

In an analogous manner, the secondary file server 908 may be hosted on one or more host machine(s) 936. The secondary file server 908 may include a plurality of virtualized computing instances, such as one or more virtual machines, containers, or combinations thereof. The virtualized computing instances may form a cluster of virtualized computing instances. Each of the virtualized computing instances may present a namespace of storage items for a file system. The storage items may be distributed in storage pool 932. Each host machine(s) 936 may host at least one file server virtual machine—e.g., at least one of FSVM(s) 926. Each of the FSVM(s) 926 may manage access requests for storage items in the storage pool 932 (e.g., files, folders, and/or shares), where the access requests are provided to the FSVM(s) 926 using a path name and/or in accordance with a file system protocol. The FSVM(s) 926, which may be implemented using virtual machine(s), container(s), daemons, or other virtualized computing instances, may each present a namespace of storage items in the storage pool 932 to one or more clients. The clients may include, for example, user VMs executing on one or more of the host machine(s) 936. The storage pool 932 may include network storage, cloud storage, and local storage devices of one or more of the host machine(s) 936. In this manner, the secondary file server 908 may be implemented in a hyperconverged architecture.

Generally, in examples described herein, the secondary file server 908 may be a fail-over file server to continue operation of the primary file server 906 in the event of a fail-over event (e.g., a whole or partial failure of the primary file server 906, and/or a planned fail-over). Accordingly, the secondary file server 908 may be hosted on different host machines than the primary file server 906. Moreover, the host machines used to host the secondary file server 908 may be generally in a location which aids in failure resistance. For example, the host machine(s) 936 may be located in a different site, room, city, country, height, or location than the host machine(s) 934. The secondary file server 908 may generally be a replica of the primary file server 906.

The admin system 902 and file server manager 904 may be implemented, for example, using any admin system and/or file server manager (e.g., files manager) described herein, such as those described with reference to FIGS. 1-8 . While a single admin system 902 and file server manager 904 are shown in FIG. 9 , multiple such systems may be present in some examples (e.g., one in communication with primary file server 906 and one with secondary file server 908). The file server manager 904 may provide multi-file server policies, such as a disaster recovery policy for primary file server 906 and/or secondary file server 908. The admin system 902 and/or file server manager 904 may communicate with the primary file server 906 and/or the secondary file server 908 using API gateways provide by the primary file server 906 and/or secondary file server 908. In this manner, API requests may be provided from the admin system 902 and/or file server manager 904 to the primary file server 906 and/or secondary file server 908. There may be API requests, for example, to communicate replication policies, and/or request replication policy changes as described herein.

In some examples, the primary file server 906 and secondary file server 908 may be in communication with an active directory server. The communication with the active directory server may occur using an API gateway of the primary file server 906 and secondary file server 908, respectively. The primary file server 906 and secondary file server 908 may be in communication with a same active directory server in some examples.

In some examples, they system of FIG. 9 may implement application level replication. Application level replication generally refers to a replication policy associated with replication of an application (e.g., a file server). Accordingly, the file server manager 904 may communicate an application level replication policy to primary file server 906 and/or secondary file server 908. The host machine(s) 934 and/or another computing system may host an application level replicator 910. The application level replicator 910 may be utilized to perform application level replication. For example, application level replication may specify a protection domain which includes multiple components of the primary file server 906. For example, the protection domain may include a plurality of virtualized computing instances used to implement the primary file server 906, such as the FSVM(s) 914, as well as the shares of a file system provided by the FSVM(s) 914—e.g., the shares of the file system distributed throughout the storage pool 918. In some examples, the application level replicator 910 may be implemented, for example, by one or more controller virtual machines (CVMs) described herein. In other examples, the application level replicator 910 may be implemented using another virtualized storage controller, by a hypervisor, and/or by another software component in communication with the FSVM(s) 914. The application level replicator 910 may generate an application level snapshot, such as application level snapshot(s) 912. The application level snapshot(s) 912 may include snapshots of virtualized computing instances used to implement the primary file server 906, such as the FSVM(s) 914 (e.g., metadata describing the FSVM(s) 914). The application level snapshot(s) 912 may also include snapshots of the storage items of the file system distributed through the storage pool 918. For example, the volume groups and/or vDisks making up the file system hosted by the primary file server 906 may be included in the application level snapshot(s) 912. Generally, an initial application level snapshot may include all the data for the protection domain at a particular time. Subsequent application level snapshots may include only differences from a previous snapshot.

The application level replicator 910 may communicate with an analogous application level replicator 924 hosted by and/or in communication with the host machine(s) 936 hosting the secondary file server 908. For example, the application level replicator 924 may be implemented using one or more controller virtual machines (CVMs) described herein. In other examples, the application level replicator 924 may be implemented using another virtualized storage controller, by a hypervisor, and/or by another software component in communication with the FSVM(s) 926. The application level replicator 924 may receive the application level snapshot(s) 912 and accordingly provide application level snapshot(s) 922, replicas of the application level snapshot(s) 912. An initial snapshot of the application level snapshot(s) 912 may be used to clone the primary file server 906 at an initial time to provide secondary file server 908 (e.g., to generate FSVM(s) 926 and storage items distributed among the storage pool 932). Subsequent application level snapshot(s) 912 may be used to update the secondary file server 908.

Accordingly, a protection domain may be defined as including a virtualized file server. The application level replicator 910 may accordingly provide a pattern of snapshots designed to ensure a secondary file server 908 may be generated and/or maintained such that the primary file server 906 may fail-over to the secondary file server 908.

In some examples, it may not be desirable to protect the primary file server 906 using a protection domain that is commensurate with the primary file server 906 itself. For example, a variety of parameters may be associated with the protection domain—e.g., snapshot frequency. A user, admin, or other process may desire to have different replication policies per share of a virtualized file server (e.g., per share of a file system). In this manner, more critical and/or valuable shares may be protected with more frequent snapshots while less important and/or valuable shares may not be snapshotted or replicated as frequently. This may save computational and storage resources. Using share based replication, an administrative user may select individual shares for replication instead of replicating a complete file server. Further, shares can be replicated at different frequencies such that, for example, higher priority shares may be replicated (e.g., backed-up) frequently and lower priority shares may be replicated less frequently, reducing the amount of replication or backup operations when contrasted with a full file server backup. Moreover, share based or share level replication may allow for quick failover using active-passive backup configurations described herein. Replication and disaster recovery may facilitate share-level data replication and file-server-level disaster recovery. In the event of a planned or unplanned loss of service, write access can be restored to protected shares by failing-over to a recovery site file server. Protection policies may indicate failover details, including the primary location, recovery location, and replication schedule. Rather than having a single protection policy for an entire file server, unique policies may be configured for different shares without tracking where, physically, the shares are stored within the file system.

Accordingly, an administrator or process managing a primary file server 906 may in some examples want to switch from the use of an application-level replication policy (e.g., a protection domain commensurate with the virtualized file server) to a data protection policy that may be specific to one or more shares of the virtualized file server. However, changing the replication policy may require re-taking an initial snapshot of the primary file server 906 in order that a common snapshot be provided between the primary file server 906 and secondary file server 908 at an appropriate level. It may be undesirable to re-take an initial snapshot because of the quantity of data involved (e.g., terabytes in some examples).

Systems and methods described herein accordingly facilitate a switch between an application-level replication policy and a share-level data protection policy that may reduce or eliminate a need to take another base snapshot. For example, a base snapshot taken during operation of an application-level replication policy may be used to set up a secondary file server 908 that is used for share-level replication going forward.

For example, the primary file server 906 may include one or more share level replicators, such as share level replicator 920. In some example, one share level replicator 920 is provided for each of the FSVM(s) 914. In some examples, each of the FSVM(s) 914 may include a share level replicator 920. In some examples, one or more share level replicator 920 are simply in communication with the FSVM(s) 914. The share level replicator 920 may provide share level snapshot(s) 916. The share level snapshot(s) 916 may be snapshots of each share managed by the primary file server 906. The share level replicator 920 may communicate with a corresponding share level replicator 930 of the secondary file server 908 to replicate the share level snapshot(s) 916 as share level snapshot(s) 928. The share level snapshot(s) 928 may be used to operate the secondary file server 908 as a fail over system for the primary file server 906.

Accordingly, the system of FIG. 9 may be initially operating using an application-level replication policy. When a switch to a share-based replication policy is desired, the admin system 902 and/or file server manager 904 may provide a request to the primary file server 906 (e.g., to one or more of the FSVM(s) 914) to change to share-level replication. Responsive to the request, the primary file server 906 (e.g., the FSVM(s) 914) may take snapshots of all or selected shares of the virtualized file server—e.g., share level snapshot(s) 916. The admin system 902 may then provide a request to the application level replicator 910 to take an application-level snapshot. An application level snapshot may be taken, which application level snapshot may then include the share level snapshot(s) 916. Note that this may not be a base level (e.g., an L0 snapshot) in some examples, as the L0 snapshot may have already been taken when application-level replication policy was initiated. The latest application level snapshot(s) 912 may be replicated to application level snapshot(s) 922 and may be used to clone the primary file server 906 as secondary file server 908. Cloning the primary file server 906 may accordingly result in share level snapshot(s) 928 being provided which correspond to the share level snapshot(s) 916. Once this replication is complete, a share-level replication policy may be established by the admin system 902, e.g., by the file server manager 904 and the application level replication policy (e.g., the protection domain commensurate with the virtualized file server) may be stopped and/or deleted. Accordingly, application level replicator 910 and/or application level replicator 924 may be stopped and/or removed. Going forward, replication may occur between primary file server 906 and secondary file server 908 using share level replicator 920 and share level replicator 930 in accordance with a share level replication policy specified by the file server manager 904.

Replication policies described herein may include, for example, a policy name, a list of source shares for replication from the source file server, an identity of the target or destination file server, and/or a replication schedule. In some examples, the identity of the target or destination file server may include identification of a target share at the secondary file server. Policies for shares of the primary file server may be stored at the primary file server (e.g., at local storage) and policies for shares of the secondary file server may be stored at the secondary file server (e.g., at local storage). In some examples, an admin system and/or file manager used to configure the replication policies may also store details of the policies.

While replicators are described with reference to FIG. 9 , in some examples, the replicators may include and/or may be in communication with one or more job dispatchers and/or schedulers. The job dispatchers and/or schedulers may dispatch and schedule jobs, respectively, to accomplish the replication described herein. Note that replicators, schedulers, and job dispatchers described herein may be software components. For example, the share level replicator 920, share level replicator 930, application level replicator 910, application level replicator 924, and/or other schedulers and/or job dispatchers may be implemented using executable instructions for performing the replicator, scheduler, and/or job dispatcher functions. The executable instructions may be executed by one or more processors (e.g., processors on host machines of the primary file server 906 and/or secondary file server 908) to implement the scheduler, replicator, and/or job dispatcher components. The schedulers, replicators, and/or job dispatchers may be distributed components, having instances of the component on each host machine of the cluster of host machines used to implement primary file server 906 and/or secondary file server 908. In some examples, the replicators described herein may be implemented as a per node service (e.g., with an instance located at each node or host machine of the file server) managed by, for example, a high availability (HA) service. Accordingly, when a HA event happens, a taken-over node may start one or more replicator processes, which may be terminated when a give-back (e.g., reversion to a failed node) occurs.

In some examples, the secondary file server 908 may serve as a passive read-only file server. For example, once replicated by application level replicator 910 and/or application level replicator 924, the secondary file server 908, even prior to a fail over event, may be active and used to service read-only requests from clients, including user VMs hosted by the host machine(s)s 936. Accordingly, the primary file server 906 may service read and/or write requests for a file system during a same time that the secondary file server 908 is servicing read-only requests. In an active-passive environment, the passive (e.g., backup) fileserver, such as secondary file server 908, is active before full failover and accepts client connections and serves data over various protocols (e.g., NFS/SMB protocols) in read-only. Accordingly, access to the secondary file server 908 in case of a disaster at or failover from a primary (e.g., source) file server may be relatively quick since the secondary file server 908 is already activated.

The replication process described herein may support both unplanned failovers and planned failovers. Both types of failures may be triggered by the user (e.g., an admin user). An unplanned failover may, in some examples, be triggered automatically upon detection of failure of the source file server (e.g., primary file server 906). An unplanned failover may occur, for example, when primary file server 906 is down. The secondary file server 908 can then be activated from the last successful snapshot per share. Clients of the primary file server 906, which may include one or more user VMs hosted by the host machine(s) 934, may then be migrated to the secondary file server 908. A planned failover may be a planned activity to change ownership of shares from the primary file server 906 to the secondary file server 908. Clients may be migrated to the secondary file server 908 on failover. Planned failovers may occur without data loss when the final delta replication is done as part of the planned failover workflow.

Generally, failover from the primary file server 906 to the secondary file server 908 is used to mean that the secondary file server 908 is serving all client requests originally directed to the primary file server 906. Failover can be a planned failover or an unplanned failover triggered through a communication to the file server manager 904. In the case of a planned failover, a request for failover may be communicated to the file server manager 904 prior to a scheduled failover to occur at a later time. Both unplanned and planned failovers may be triggered through user interaction with a user interface presented by the file server manager 904 and/or admin system 902. Planned failovers may generally be used, for example, to conduct maintenance, upgrades, or other operations on the primary file server 906. Unplanned failover may be used in the case of failure of the primary file server 906.

After failover from the primary file server 906 to the secondary file server 908, the shares hosted by the primary file server 906 may be marked as read-only shares. In some examples, the shares at the primary file server 906 may be inaccessible, and clients attempting to access the file system at the primary file server 906 may be redirected to the secondary file server 908. In some examples, the shares may be configured to be inaccessible upon unplanned failover (e.g., in case of disaster at the primary file server 906). A user requesting planned failover may, in some examples, request that the shares of the primary file server 906 be configured to continue to serve read requests after failover to the secondary file server 908. The shares at the secondary file server 908 may be configured to allow for both read and write requests. For example, permissions for the shares may be changed at the secondary file server 908 to allow for both read and write requests by, for example, updating access information for the shares of the secondary file server 908. Generally, the file system at the secondary file server 908 may correspond to the file system at the primary file server 906, meaning that the shares at the secondary file server 908 correspond to the shares of the primary file server 906.

In some examples, to complete failover from the primary file server 906 to the secondary file server 908, the file server manager 904 may communicate with an active directory and/or domain server to update domain information such that the secondary file server 908 takes over for the primary file server 906. For example, upon failover, the file server manager 904 may communicate with an active directory server or a domain server to assign an IP address of the primary file server 906 to the secondary file server 908 such that requests directed to the IP address of the primary file server 906 are provided to a the secondary file server 908. In some examples, such IP addresses may correspond to host machines and/or FSVMs of the primary file server 906 and/or the secondary file server 908. For example, consider a failover scenario where the primary file server 906 had failed over to the secondary file server 908. The file server manager 904 may update a domain server and/or active directory server such that an IP address previously assigned to the primary file server 906 (e.g., the IP address used to access one or more host machines and/or FSVMs of the primary file server 906) is now assigned to the secondary file server 908 (e.g., the IP address may be used to access one or more host machines and/or FSVMs of the secondary file server 908). In this manner, when a client requests access to a share at the primary file server 906, the request may be provided to the corresponding share at the secondary file server 908. Such redirection may, in various examples, be transparent or undetectable from the view of the client.

FIG. 10 is a flowchart depicting an example process for switching between application level and share level replication policies in accordance with examples described herein. The blocks of FIG. 10 are exemplary—additional, fewer, or different blocks may be used in other examples, and the blocks may be re-ordered in some examples.

In block 1002, a file server may be operated in accordance with an application level replication policy. For example, the admin system 902 and/or file server manager 904 of FIG. 9 may specify an application replication policy for the primary file server 906. The primary file server 906 may utilize application level replicator 910 to maintain application level snapshot(s) 912, which may be used to replicate the primary file server 906 to the secondary file server 908. For example, a snapshot of a file server (e.g., an application-level snapshot) may be replicated during operation to a disaster recovery location, such as the secondary file server 908 of FIG. 9 . The application level replication policy may specify a protection domain including the virtual machines (e.g., FSVM(s)s 914), volume groups, vDisks and other data or metadata present in the primary file server 906. In this manner, the application level replication policy protects the primary file server 906 as a whole.

In block 1004, a request may be received to change from the application level replication policy to a share level replication policy. For example, the request may be a request to change from use of a protection domain at an application level to a data protection policy specific to a share or group of shares. The change may be desired, for example, to create a share replication policy for one share, or a group of shares, that may be different than a replication policy for another share, or a group of shares, of a file system provided by the primary file server 906. For example, the per-share (or group of shares) replication policy may set different snapshot frequencies and/or snapshot retention policies for shares or groups of shares. High priority, high security, or other selected shares may be snapshotted more frequently and/or their snapshots retained longer than other shares in some examples of share-level replication policies. The request received in block 1004 may be received by admin system 902, file server manager 904, and/or primary file server 906 in some examples. The request may be generated using a user interface of the admin system 902 and/or file server manager 904 in some examples. The user interface may present, on a display, a user an option to select to migrate from an application level replication policy to a share level replication policy. Responsive to a selection to select the migrate from the application level replication policy to the share level replication policy, the user interface may further display a list of shares for a selected file server (e.g., a list of shares of primary file server 906), and a user may select shares to protect using the replication policy, and set replication policies per share.

Responsive to the request to migrate from application level to share level replication, a command may be sent to, and received by, the primary file server 906 to snapshot the shares of the primary file server 906. For example, the command may be received by one or more of the FSVM(s) 914 and/or the share level replicator 920. The share level replicator 920, which may be a distributed replicator (e.g., one instance may be present on each of the host machine(s) 934 or each of selected host machine(s) 934), may snapshot the shares of the primary file server 906—e.g., the shares which are stored in a distributed manner in the storage pool 918. In some examples, a user (e.g., the admin system 902 and/or file server manager 904 or another process or administrator) may execute a command on one or more of the FSVM(s) 914 or other share-level software process of the primary file server 906. The command may indicate that a migration to share level replication is being initiated. The primary file server 906, such as by using one or more of the FSVM(s) 914 or other software component may validate the command to change to share level replication. For example, the primary file server 906 may access an existing replication policy. If the existing replication policy is a share level replication policy, the received command to change to a share level replication policy may generate an error.

In block 1006, snapshots may be taken of the shares of the primary file server 906. In some examples, snapshots may be taken of all shares. In some examples, snapshots may be taken of selected shares (e.g., shares for which replication and/or disaster recovery protection is desired). The snapshots may be taken, for example, by the share level replicator 920. Recall the share level replicator 920 may be a distributed replicator. An instance of the share level replicator 920 may be present on each of several (or all) of the host machine(s) 934. In some examples, an instance of the share level replicator 920 may be present associated with each of the FSVM(s) 914. In some examples, the snapshots taken in block 1006 may be tagged as initial share snapshots. For example a ‘replication-base-common’ tag may be used. The tag may indicate that the snapshot is a common base snapshot for the share. The tag may be stored with the snapshot and/or may be stored separately from the snapshot. In some examples remote procedure call(s) (RPC) may be used to generate the share level snapshot(s) 916.

In block 1008, a snapshot of the application may be taken. For example, an application level snapshot may be taken—which may be a snapshot of a file server, such as primary file server 906 of FIG. 9 . The application snapshot may be taken in accordance with an existing application level replication policy in some examples. The application level snapshot may include, for example, virtualized computing instances (e.g., VMs, FSVMs, containers) and volume groups, vDisks, or other data groupings that make up the file server. The application snapshot may be a delta snapshot. For example, it may include only changes since a previous application level snapshot performed in accordance with a pre-existing application level replication policy. Note that the snapshot of the application in block 1008 may be taken after the snapshots of the shares are created in block 1006. In this manner, the snapshot of the application generated in block 1008 may include the snapshots of the shares generated in block 1006. In some examples, the application snapshot may be taken by an application level replicator, such as application level replicator 910 of FIG. 9 . The application level replicator 910 may be executed by and/or in communication with one or more CVMs or other virtualized computing instances described herein. In this manner, the application level replicator 910 may be provided at an operating system or other level, different than the application level. Recall also the application level replicator 910 may be distributed. For example, and instance of the application level replicator 910 may exist on several or all of the host machine(s) 934. In some examples one instance of the application level replicator 910 may be associated with each CVM or other virtualized storage controller hosted by the cluster of host machine(s) 934. The application snapshot, such as application level snapshot(s) 912 may be replicated to a disaster recovery location. For example, the application level snapshot(s) 912 may be replicated to the host machine(s) 936 of FIG. 9 . The application level snapshot(s) 912 may include share-level snapshots of at least one share of a file system, such as the snapshot(s) taken in block 1006.

In some examples, block 1006 and block 1008 may be wholly and/or partially combined. For example, a same component may be used in whole or in part to take share snapshots as described in block 1006 and an application snapshot as described in block 1008. The component, which may be a CVM as described herein, may itself tag the share snapshots, e.g., using RPC calls, or may communicate through other components (e.g., through one or more FSVMs) to take share snapshots.

In block 1010, a cloned file server may be created from one or more replicated application level snapshot(s), including the one taken in block 1008. For example, the secondary file server 908 may be created as a clone of primary file server 906 from the application level snapshot(s) 922, which may be replicated from the application level snapshot(s) 912 of FIG. 9 . Note that the application level snapshot(s) 922 used to create the secondary file server 908 may include the snapshot(s) taken in block 1008. In this manner, replicated share level snapshots may also be created on secondary file server 908. Accordingly, creating the cloned secondary file server 908 may include creating FSVM(s) 926, share level replicator 930, and/or share level snapshot(s) 928 as replications of the corresponding components of the primary file server 906. In some examples, the secondary file server 908 may not be wholly created in block 1010. In some examples, the secondary file server 908 may already be present and may be updated using the snapshot taken in block 1008, for example.

In block 1012, shares may be rolled back to an initial common snapshot. For example, a command may be provided (e.g., by admin system 902 and/or file server manager 904 and/or by an administrator in communication with the secondary file server 908). The command may specify that the shares of the secondary file server 908 be based on snapshots tagged as initial share snapshots. For example, snapshots having a ‘replication-base-common’ tag. Recall the initial share snapshots may have been taken in block 1006 of FIG. 10 . Accordingly, block 1012 may ensure that the secondary file server 908 is operating based on a common shared share-level snapshot with the primary file server 906. In some examples one or more of the FSVM(s) 926 may be utilized to roll back the shares. Other software components of the secondary file server 908 may be used in other examples.

Additional validation or preparation actions may also be performed on the destination file server (e.g., secondary file server 908). For example, a validation may be performed to ensure each share of the secondary file server 908, or each share desired to be protected with disaster recovery, has an initial base snapshot. Otherwise, an error may be generated by the secondary file server 908. In some examples, the cloned file server (e.g., secondary file server 908) may have a property of each share set to read only. In this manner, the cloned file server, e.g., secondary file server 908, may serve as a read only file server that may service read requests for storage items even during times with the primary file server is operational. Any shares which fail validation and/or are unable to be set to read only may be reported by the secondary file server 908 as errors.

In block 1014, a share based replication policy may be defined. The share based replication policy may also be referred to as a data protection policy. For example, an administrator or other user (including another software process) may connect to admin system 902 and/or file server manager 904, such as through a user interface, and may specify a share-based replication policy. The user interface may prompt a user to specify share-based replication. The user interface may prompt a user to select shares to be protected using a particular data replication policy. Each share, or group of selected shares, may be protected using a particular data replication policy—such as a different replication frequency and/or snapshot retention time, that may be different than other shares or groups of shares. Accordingly, a replication policy may be defined that is specific to a share or a group of shares. An indication of the replication policy may be provided to the file server, such as the primary file server 906 of FIG. 9 . In some examples, the primary file server 906 may receive an indication of replication policies that are different for different shares—so one share (or group of shares) may have a different replication policy than another share (or group of shares). While block 1014 is depicted in FIG. 10 as occurring after the snapshot and replication blocks of FIG. 10 , in some examples, the creation of the share-based replication policy may occur earlier and/or in parallel with the other depicted blocks.

In block 1016, the application level replication policy may be unconfigured. For example, the pre-existing application level replication policy may be deleted, archived, or otherwise transitioned out of use. The admin system 902 and/or file server manager 904 may perform block 1016 in communication with the primary file server 906 and/or secondary file server 908. By unconfiguring the application level replication policy, application level replicators at the source and/or destination file servers (such as application level replicator 924 and application level replicator 910 of FIG. 9 ) may be deleted, archived, and/or turned off in some examples. In some examples, application level snapshots may be deleted, archived, and/or no longer used for replication (e.g., such as application level snapshot(s) 912 and application level snapshot(s) 922 of FIG. 9 ). Going forward, the admin system 902 and/or file server manager 904 may manage the primary file server 906 and secondary file server 908 in accordance with the share level replication policy (e.g., the data protection policy). For example, subsequent snapshots of shares of a file system hosted by the primary file server 906 may be replicated in accordance with one or more data protection policies.

Accordingly, by defining a share level replication policy and optionally unconfiguring an application level replication policy, the recovery policy of a file server may be updated. For example, the recovery policy of the primary file server 906 of FIG. 9 may be updated from an application-level replication policy to a share-level replication policy.

From the foregoing it will be appreciated that, although specific embodiments have been described herein for purposes of illustration, various modifications may be made while remaining with the scope of the claimed technology.

Examples described herein may refer to various components as “coupled” or signals as being “provided to” or “received from” certain components. It is to be understood that in some examples the components are directly coupled one to another, while in other examples the components are coupled with intervening components disposed between them. Similarly, signal may be provided directly to and/or received directly from the recited components without intervening components, but also may be provided to and/or received from the certain components through intervening components.

Claims

What is claimed is:

1. At least one non-transitory computer readable medium encoded with executable instructions which, when executed, cause a system to perform operations comprising:

in accordance with an application level replication policy, replicate a snapshot of a file server at a primary location to a disaster recovery location, wherein the snapshot of the file server includes at least one snapshot of a share of a file system provided by the file server, and wherein the snapshot replicated to the disaster recovery location is replicated in accordance with the application level replication policy;

receive a request to change from use of the application level replication policy to a share level replication policy; and

update a recovery policy of the file server at the disaster recovery location for subsequent replication on the share level, using the snapshot of the file server taken using the application level replication policy.

2. The non-transitory computer readable medium of claim 1, wherein said update the recovery policy comprises receiving an indication of a replication policy specific to the share.

3. The non-transitory computer readable medium of claim 1, wherein said update the recovery policy comprises receiving an indication of a first replication policy for the share and a second replication policy for another share of the file system, the second replication policy different than the first replication policy.

4. The non-transitory computer readable medium of claim 1, wherein the file server comprises a plurality of virtualized computing instances, each of the plurality of virtualized computing instances configured to present a namespace of storage items of the file system.

5. The non-transitory computer readable medium of claim 1, wherein the file server comprises a plurality of host machines, each host machine configured to host at least one of a plurality of virtualized computing instances.

6. The non-transitory computer readable medium of claim 4, wherein the snapshot of the file server includes snapshots of the plurality of virtualized computing instances.

7. The non-transitory computer readable medium of claim 5, wherein at least one of the plurality of virtualized computing instances is configured to manage access requests for a storage item of the file system.

8. The non-transitory computer readable medium of claim 7, wherein the storage item is stored in a storage pool, the storage pool including local storage devices of at least one of the plurality of host machines.

9. The at least one non-transitory computer readable medium of claim 1, wherein said updating does not require replicating another snapshot of the file server.

10. A method comprising:

hosting a file server at a disaster recovery location having a protection domain including a plurality of virtualized computing instances and files of a file system hosted by the file server, the file server replicated to the disaster recovery location using a snapshot of the file server at a primary location, wherein the file server is replicated in accordance with the protection domain;

requesting a change from the protection domain to a data protection policy specific to a share of the file system;

updating the file server of the disaster recovery location from the protection domain to the data protection policy specific to the share of the file system, the updating using the snapshot of the file server at the primary location taken using the protection domain; and

replicating a snapshot of the share in accordance with the data protection policy.

11. The method of claim 10, further comprising:

generating the snapshot of the file server; and

generating a secondary file server based on the snapshot of the file server.

12. The method of claim 11, wherein replicating the snapshot of the share comprises replicating the snapshot of the share to the secondary file server.

13. The method of claim 10, wherein the secondary file server is a passive read-only secondary file server.

14. The method of claim 10, wherein the file server includes a plurality of host machines, and wherein each of the host machines is configured to host at least one of the plurality of virtualized computing instances.

15. The method of claim 14, wherein the file server includes a storage pool, and wherein the storage pool includes a local storage device of at least one of the host machines.

16. The method of claim 15, wherein the plurality of virtualized computing instances are configured to manage access requests for a storage item of the file system.

17. The method of claim 10, wherein the protection domain comprises an application level protection domain.

18. The method of claim 17, wherein the data protection policy comprises a share level data protection policy.

19. The method of claim 10, wherein said updating does not require replicating another snapshot of the file server.

20. A system comprising:

a primary file server, the primary file server including:

a virtualized computing instance configured to form a cluster with other virtualized computing instances, the virtualized computing instance configured to present a namespace of storage items; and

a storage pool, the storage pool accessible to the virtualized computing instance and configured to store the namespace of storage items, wherein the virtualized computing instance is configured to manage access requests for a particular storage item in the namespace of storage items; and

a secondary file server, the secondary file server replicated from a snapshot of the primary file server in accordance with a file server level protection domain, wherein the secondary file server is replicated in accordance with the file server level protection domain used to replicate the primary file server;

a user interface to the primary file server, the user interface configured to provide a request to change from use of the file server level protection domain to a share level data protection policy; and

wherein receipt of the request causes update of the file server level protection domain of the secondary file server for subsequent replication on a share level using the snapshot of the primary file server taken using the file server level protection domain.

21. The system of claim 20, wherein the secondary file server comprises a passive read-only secondary file server.

22. The system of claim 20, wherein the primary file server comprises a plurality of host machines, and wherein each of the plurality of host machines is configured to host at least one of the virtualized computing instances.

23. The system of claim 22, wherein the storage pool includes at least one local storage device of the plurality of host machines.

24. The system of claim 20, wherein the primary file server is configured to replicate a snapshot of a share of a file system hosted by the primary file server after receipt of the request to change from the file server level protection domain to the share level data protection policy.

25. The system of claim 20, wherein the share level data protection policy includes a first data protection policy for a first share of a file system hosted by the primary file server and a second data protection policy for a second share of the file system hosted by the primary file server, and wherein the first data protection policy and the second data protection policy are different.

26. The system of claim 20, wherein said update does not require replicating another snapshot of the file server.